Forum Discussion
vincentw415
Mar 25, 2024Copper Contributor
MDE List Machine API Results Discrepancy
Hi- I'm currently using the MDE List Machine API to pull device information for my logic app to populate an excel file. I am able to create an excel file and populate it with most device informat...
jbmartin6
Mar 26, 2024Iron Contributor
Possible you are hitting the 10k records limit on the API?
- vincentw415Mar 26, 2024Copper Contributor
There are around 27,000 devices in my organization, so i have 3 separate API calls in my logic app that each pull 10,000 entries. So the first API would include $top=10,000&$skip=0, the next API would include $top=10,000&$skip=10000, and the last API would include $top=10,000&$skip=20000. My logic app produces 24,000 device results in the excel file, which is around 3000 less than what's expected. If my logic app is truly pulling all devices possible, I'm not sure why there's still a discrepancy. By the way I'm using this List Machines API: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/api/get-machines?view=o365-worldwide
- jbmartin6Mar 27, 2024Iron ContributorI have no idea why you see this, just a couple thoughts though FWIW.
I understand that if you just request all the machines, the response will include a link to the next page. I forget the details on this since I haven't had to use it myself. I wonder if you follow that link instead of using direct skips you would see different results.
Do the missing 3000 devices have some common factor, maybe last seen date?