M365 Connector - Defender Advanced Hunting Logs

Occasional Contributor

Hello,

 

Trying to ingest the advanced hunting data as per the documentation.
Once I try to select some tables I want from MDE, I get this error:

bradleyfell_0-1661029122093.png

 

6 Replies

@bradleyfell Just to double check, you did meet all the prerequisite requirements, right?

Gary,
Could it be that
Defender for endpoint P2 is not elidg for this connector?
the license requirements in the documentation referring to defender are quite vague.
GA (OR) Security Admin
I assigned both roles just to make sure.
That should work. At this point I would open a ticket.
agreed, thanks sir
Getting the same error message in another tenant.
Defender Endpoint P2 assigned to the GA
ref
https://prnt.sc/MB7y_xRhZN7x
Just an update for those who experience this error.
It is in fact as it appears as an authentication issue.
This issue exists within CSP customer tenants, will update with resolution.