No alerts getiing displayed ( DEFENDER FOR IDENTITY )

Occasional Visitor

Hi, so i've recently setup the senor on DC and the status is healthy and running and i'm also able to recieve the test syslog on my SIEM, but i'm not getting any actual alerts on my SIEM or on the Cloud apps portal under the alerts and yes i;ve enabled the cloudapp - identity integration. What could be the issue ? Or How long does it takes for the alerts to actually get displayed once the sensor is deployed ?

1 Reply

@sahil_kakad 

Are you able to see alerts in the classic MDI portal (https://portal.atp.azure.com)?