Onboarded device missing info

[Fhilp]

I'msetting up defender in preparation for a migration from my current AV Provider. Iv created some test devices and successfully onboarded them and they have recent updated times and dates since last week.

I have active onboarded devices, when i select the device is see the device Overview and Incidents and alerts tabs but the other ones are missing such as Timeline, Security recommendations, Software inventory, Discovered Vulnerabilities, Missing KB

The device also shows 0 logged on users in the last 30 days which is also incorrect.
Anyone any ideas? 

[#2]

how long did you wait before checking those information's ?

[#3]

@eliekarkafy 

They were onboarded last week and have been showiyas updated in defender console since last update being today at 14.25.

Policy was created last week.

[#4]

@Fhilp did you try to check the event viewer to check if something is blocking your devices from reporting back to MDE ? you can use the MDE client analyzer tool Run the client analyzer on Windows | Microsoft Learn

[#5]

@eliekarkafy

Yes ive ran the tool with no errors, its a strange one. To clarify im using Plan 1 licences, its not something that is specific to plan 2?

[#6 · Accepted solution]

@Fhilp for timeline appearance it should work with P1 , here below the link to compare P1 with P2 

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-plan-1-...

I suggest you open a ticket with MS security team so they can check your tenant in the background.