Jun 21 2023
We notice that a few weeks ago that we stopped receiving logs from this query:
| where TimeGenerated > ago(32d)
| where StartTime >= startofday(ago(31d)) and EndTime < startofday(now())
| where IsBillable == true
| summarize BillableDataGB = sum(Quantity) / 1000. by bin(StartTime, 1d), DataType
| render columnchart
We run this query, then we have some charts, and there we just want too see the chart called:
MicrosoftPurviewInformationProtection, but that chart doesn't have almost any data.
(It used to have 0.3/0.4GB of data and now the result is 0.018GB)
Our connector, Microsoft Purview Information Protection as normal chart/data everyday.
Does someone know if something changed recently, and how could this affect some of our DLP/AIP logs/services?