Mar 31 2020 12:20 AM
Mar 31 2020 12:20 AM
We noticed that we are not getting data for some apps since somewhere around 9 March. Usage data stopped in a miracle way for apps like OneDrive, Teams, YouTube, Spotify etc. Means that it won’t show, how many users, traffic and which users used the apps.
Exchange and Sharepoint do still showing correct information.
Is there something I can check or is there a platform issue?
Mar 31 2020 12:13 PM
@ElduderinoHow is your MCAS discovery configured? Could it be a problem with an appliance not sending the logs, or are you using Defender ATP?
Apr 01 2020 12:16 AM
@Ru we are using Defender ATP so the setup is straight forward. Setting "automatic log upload" shows an active connection. Did turn the integration on and off again, no luck.
Apr 01 2020 02:13 AM
Apr 01 2020 03:09 AM
@Ru I will raise a ticket. Defender ATP forwarding is enabled and did work over the last 6 months, till the beginning of March.
We are licensed for Cloud App discovery and we have some users with the E5 license. We don't use Cloud app security in full extent, but we only monitor what is being used, so Discovery.
Machines are reporting to Cloud app security, but when I zoom in, only a few apps do report traffic and usage data. gives me the feeling that the integration with Defender ATP doesn't work correctly
Aug 21 2020 07:06 AM
@NinjaKitty The issue was caused by a change they have done. They told me that this change would improve the data report reliability of the detected cloud apps. However with the first change they introduced quite some issues, this will/has been fixed (at least they say) in later changes.
However I have still the feeling that it is not reliable, the data is absolutely not correct.
OneDrive for Business and teams were previously reported as separate apps however they removed this and it is now reported all together as SharePoint.
So really disappointing.
Aug 27 2020 06:07 AM
Aug 27 2020 08:15 AM
@Matthew Barrett no, not at all. Everything is fine....or they are working on it, is the answer.