Index not found in Logs

Elastic Stack Elasticsearch
1

I have installed Microsoft Defender Endpoint integration to collect logs. The agent was installed properly and the other configuration. But If I go to Elastic Search -> Discover and try to create a new data view, I can't find the index "logs-microsoft-defender" or anything related to this.

What could be going wrong that it is not collecting any data?

The issue is similar to this: Data Stream not found in Data Views

2

HI,

and something like this: logs-microsoft_defender_endpoint?

3

that one was also not found. wondering what else should I check.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.