Data Stream not found in Data Views

sakib3833
Fri, 21 Oct 2022 17:14:09 +0000
SIEM

I use Microsoft Defender Endpoint integration to collect logs. The agent installed perfectly and the other ID and secret key put accordingly.
In the Index management section it shows that it creates Data Stream.

But in Data Views section, I couldn't find the Data Stream and eventually I wasn't able to navigate any MS defender endpoint data in Discover Section.

Previously I did the same process for MS365 Defender log. That works fine.
So I am not sure what exactly the issue is. Any suggestions?
Thank you.

3 posts - 3 participants