Forum Discussion
DineshCR
Mar 14, 2023Copper Contributor
Defender API streaming Incidents & Alerts...HELP
Hello everyone we are currently going through an audit and one of the things that we need set up is a storage account that saves Incidents & Alerts for up to a year. I am going through defender d...
- Mar 15, 2023
You go to Settings->Microsoft 365 Defender->Streaming API and configure forwarding of alerts and other events to Azure Storage, or an Event Hub for pickup by some other application.
It's there in the link you posted, maybe your description of your problem needs some more details.
jbmartin6
Mar 15, 2023Iron Contributor
You go to Settings->Microsoft 365 Defender->Streaming API and configure forwarding of alerts and other events to Azure Storage, or an Event Hub for pickup by some other application.
It's there in the link you posted, maybe your description of your problem needs some more details.
DineshCR
Mar 15, 2023Copper Contributor
thats what i what i am trying to find out my self....i don't see the the "Steaming API" option on my end...i am guessing this is a licensing issue?
- jbmartin6Mar 15, 2023Iron ContributorPerhaps, though AFAIK if you have MDE you have access to the streaming API. Maybe a permissions issue with your logon? Or maybe you are looking in the wrong place?