microsoft defender for endpoint dashboard not populating

%3CLINGO-SUB%20id%3D%22lingo-sub-2256246%22%20slang%3D%22en-US%22%3Emicrosoft%20defender%20for%20endpoint%20dashboard%20not%20populating%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2256246%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3Ewhat%20is%20the%20cause%20of%20data%20not%20properly%20populating%20in%20the%20defender%20for%20endpoint%3F%20there%20are%20missing%20metrics%20in%20the%20defender%20for%20endpoint%20dashboard%3F%20how%20do%20I%20resolve%20this%20problem%20%2C%20get%20my%20data%20populate%20properly%20and%20get%20data%20on%20the%20dashboard%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2256283%22%20slang%3D%22en-US%22%3ERe%3A%20microsoft%20defender%20for%20endpoint%20dashboard%20not%20populating%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2256283%22%20slang%3D%22en-US%22%3EWhich%20metrics%20are%20missing%3F%20Noticed%20this%20morning%20the%20Defender%20for%20Endpoint%20portal%20is%20moving%20to%20the%20new%20Microsoft%20365%20Security%20Center%20-%20%3CA%20href%3D%22https%3A%2F%2Fsecurity.microsoft.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsecurity.microsoft.com%3C%2FA%3E.%20Would%20be%20worth%20checking%20there%20as%20well%20if%20you%20haven't%20already.%3C%2FLINGO-BODY%3E
New Contributor

what is the cause of data not properly populating in the defender for endpoint? there are missing metrics in the defender for endpoint dashboard? how do I resolve this problem , get my data populate properly and get data on the dashboard?

3 Replies
Which metrics are missing? Noticed this morning the Defender for Endpoint portal is moving to the new Microsoft 365 Security Center - https://security.microsoft.com. Would be worth checking there as well if you haven't already.
it's been months having this problem, I cannot see the alerts coming in. defender shows no alerts which is not correct. I cannot see lot of data on defender, i think something is broken.

The issue is not likely to be related to the move to the new M365 portal. We would need to gather additional information so we can best assist you:

  • Do you have a valid MDE license? If so, were you able to see all expected information in the portal previously or is the issue specific to Windows or any other OS?
  • Currently are you missing alert information from all devices or just from a subset of devices?
  • Are you seeing any information at all arriving from the monitored devices?

 

I would recommend creating a customer support case via their support channel, if you have not already.