Getting server error adding XDR

Hi ,

From what I understand, this issue is likely due to the fact that the Microsoft Defender XDR data connector only supports a specific set of categories, and the ones you're trying to add are not part of that set.

Below are the set supported by data connector -

Table name Events type

DeviceInfo Machine information, including OS information

DeviceNetworkInfo Network properties of devices, including physical adapters, IP and MAC addresses, as well as
connected networks and domains

DeviceProcessEvents Process creation and related events

DeviceNetworkEvents Network connection and related events

DeviceFileEvents File creation, modification, and other file system events

DeviceRegistryEvents Creation and modification of registry entries

DeviceLogonEvents Sign-ins and other authentication events on devices

DeviceImageLoadEvents DLL loading events

DeviceEvents Multiple event types, including events triggered by security controls such as Windows Defender Antivirus and exploit protection


DeviceFileCertificateInfo Certificate information of signed files obtained from certificate verification events on endpoints

thanks

let me know if you have any question 🙂