Not all web traffic showing in Defender for Cloud Apps

Occasional Visitor

We are starting to use Defender for Cloud Apps using Defender for Endpoint for log upload. We are not seeing all user traffic in Defender for Cloud Apps - for example if I go to - my PC is not being added to the list of people who went to


Any thoughts on where I can look for what is going wrong?

2 Replies
Same here. I can navigate to Defender for Endpoint (the source of data in my case) and see the events of edge process sending requests to 3rd party domains and IPs, but that information is not updated in MDCA, although MDE is enabled as documented here:

Is there any delay after logs from MDE are processed and presented in MDCA?
Check that you are looking at the Defender Endpoints view in the upper right of the cloud app discovery view. With Defender for Endpoint you will see only the device names, not the user names.