No UrlClickEvents table

Copper Contributor

Hi,
I have a little problem with the customer I am working with. We need to have access to UrlClickedEvents in advanced hunting but we can not see it.

 
kmajchrzak_1-1706095645727.png

I am using Security Operator and Security Reader Entra Built in Roles.

 

kmajchrzak_3-1706095840196.png

This is not licensing problem and there is a running MDO in clients environment. There were alerts related to url clicked events so it is not due to the fact that the table is not populated. I have tried adding the same roles in my environment and it gave me the access to this table. What else can i do to get acess to this table?

I have two running policies in safe links. First is basic protection and second is configured as followed:

kmajchrzak_4-1706095965674.png

 


Edit:

There is a URL clicked tab in explorer for MDO, so I have no idea why this table is not available:

kmajchrzak_0-1706097920533.png

 

1 Reply

@kmajchrzak that's a tough one, indeed since you have access to Advanced Hunting you should be able to access the UrlClickEvents table as it refers to P2 MDO license.

 

Be that as it may, I would reach out to Support for this. In the meantime, if you get a reply back, please let us know what the issue was.