We re unable to get the logs which we select the connector of microsoft defender for endpoint.

Copper Contributor

We re unable to get the logs which we select the connector of microsoft defender for endpoint. I am facing this issue please help me to get over this . Thank you , secondly all the events that are shown in this pic have already checked and saved too.  But still we are unable to get these logs into defender and sentinel 

Humza_Bukhari_0-1695833008458.png

 

2 Replies

Hey @Humza_Bukhari 

 

Do you have the "Security Administrator" role assigned to your account also do you have the "Microsoft Sentinel Contributor" role assigned.

 

These roles are required to enable the Defender data connectors within Microsoft Sentinel

 

@BillClarksonAntill  the issue has been resolved , there is some miss configuration and not properly done by the systems team thats why facing that error after proper configuration and select all the check mark while doing configuration the issue has been resolved . Thank you