Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community
SOLVED

VMs Deletion

Copper Contributor

Hi Techies,

 

Our SOC team got an alert where 25 VMs were deleted in a single session. The investigation logs in 365 Defender show that the VMs were successfully deleted the same was confirmed with the user who deleted those VMs.

But I still see those VMs as resources in the subscription. They are still there.

What could be the reason? Probably that it was not deleted properly. Please help. 

 

Thanks :)

 

1 Reply
best response confirmed by Yashrajsp10 (Copper Contributor)
Solution
There could be a delay in the updates being reflected in the subscription view, due to caching or synchronization issues.You should check the status of the deletion process, validate if the VMs are still attached to a resource group, and force a synchronization or clear cache if necessary. It is also advisable to run a script to check the consistency of resources in the subscription.
1 best response

Accepted Solutions
best response confirmed by Yashrajsp10 (Copper Contributor)
Solution
There could be a delay in the updates being reflected in the subscription view, due to caching or synchronization issues.You should check the status of the deletion process, validate if the VMs are still attached to a resource group, and force a synchronization or clear cache if necessary. It is also advisable to run a script to check the consistency of resources in the subscription.

View solution in original post