MIP - Microsoft Purview Information Protection - Logs

Copper Contributor

Hello everyone,


We notice that a few weeks ago that we stopped receiving logs from this query:



| where TimeGenerated > ago(32d)
| where StartTime >= startofday(ago(31d)) and EndTime < startofday(now())
| where IsBillable == true
| summarize BillableDataGB = sum(Quantity) / 1000. by bin(StartTime, 1d), DataType
| render columnchart


We run this query, then we have some charts, and there we just want too see the chart called:


MicrosoftPurviewInformationProtection, but that chart doesn't have almost any data.


(It used to have 0.3/0.4GB of data and now the result is 0.018GB)


Our connector, Microsoft Purview Information Protection as normal chart/data everyday.


Does someone know if something changed recently, and how could this affect some of our DLP/AIP logs/services?

Thank you.

0 Replies