# M365 Defender Logs integration- duplicated alerts from Defender for Endpoint **URL:** \ **Category:** Elastic Security\ **Created:** [April 25, 2022, 9:46am UTC](https://discuss.elastic.co/t/m365-defender-logs-integration-duplicated-alerts-from-defender-for-endpoint/303141 "2022-04-25T09:46:28Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![misiel](https://avatars.discourse-cdn.com/v4/letter/m/ecae2f/32.png) [@misiel](https://discuss.elastic.co/u/misiel)\ **Post date:** [April 25, 2022, 9:46am UTC](https://discuss.elastic.co/t/m365-defender-logs-integration-duplicated-alerts-from-defender-for-endpoint/303141/1 "2022-04-25T09:46:29Z")
Hello! M365 Defender Logs integration is spamming with duplicated Microsft Defender for Endpoint alerts. It retrieves the same alerts every 5 minutes, even when the alerts and incidents are already marked as resoled in Defender for Endpoint console. It happens all the time since I enabled the integration for around one week already and I am flooded with these alerts. Please take a look at attached screenshot as example of described behavior. Any chance to suppress it and to not receive these alerts all the time? It looks like typical bug in integration. Duplication doesn't happen with (in example) Defender alerts about email reported by user or malware file uploaded to OneDrive/Sharepoint. Only for Defender for Endpoint alerts. ![duplicated_alerts](https://us1.discourse-cdn.com/elastic/original/3X/a/7/a738ec2ff4b5181a3bf7ee2a88e8357e2fa4dcfe.png) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 23, 2022, 9:46am UTC](https://discuss.elastic.co/t/m365-defender-logs-integration-duplicated-alerts-from-defender-for-endpoint/303141/2 "2022-05-23T09:46:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.