Share via

I have no log data flowing into Cloud Apps Dashboard

Anonymous
2023-05-21T23:13:04+00:00

I recently configured Microsoft Defender for Cloud Apps in my Microsoft 365 tenant. I have enabled the Microsoft 365 APP connector and I see the status is connected. It also states we have the expected number of accounts protected. However, last log activity is blank. I presume this is also why no data is flowing into cloud apps and no reports are being generated. Is it a matter of configuring the induvial data collection Am I able to please get some guidance how to enable this?

Microsoft 365 and Office | Microsoft 365 Defender | Other | Windows

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. Anonymous
    2023-05-22T05:42:37+00:00

    Hello

    To get detailed cloud app events to be ingested into Cloud Apps, you need to enable the Microsoft 365 App connector. Here are the steps on how to do it:

    Go to the Microsoft 365 Defender portal. In the left navigation pane, select Connectors. Click Add connector. Select Microsoft 365 App connector. Click Next. Follow the instructions on the screen to complete the setup.

    Once the Microsoft 365 App connector is enabled, detailed cloud app events will be ingested into Cloud Apps. You can then use Cloud Apps to view and analyze this data to gain insights into your cloud app usage and security posture.

    You can also refer the below article for more information https://learn.microsoft.com/defender-cloud-apps/connect-box

    Regards,

    Abdal

    1 person found this answer helpful.
    0 comments

4 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-05-22T06:33:45+00:00

    Hello,

    Unfortunately, I don't have any further troubleshooting to offer.

    There are many knowledgeable users active on the forum and I hope that someone else can offer further insight on your issue.

    Thanks, Abdal

    0 comments
  2. Anonymous
    2023-05-22T06:30:30+00:00

    Thanks.

    The connector is enabled however I get this status error:

    0 comments
  3. Anonymous
    2023-05-22T04:43:39+00:00

    Thanks Abdal,

    After further investigation, I can see only Azure AD users and groups connector is enabled. How would I get detailed cloud app events to be ingested into cloud apps?

    0 comments
  4. Anonymous
    2023-05-22T03:44:57+00:00

    Hello

    I am Abdal and I would be glad to help you with your question.

    There are a few things you can check to make sure that log data is flowing into the Cloud Apps Dashboard:

    Make sure that the Microsoft 365 App connector is enabled and connected. Make sure that the correct accounts are protected. Make sure that log collection is enabled for the apps that you want to monitor. Make sure that the Cloud Apps Dashboard is up to date. Check the data retention policies in the Microsoft 365 Defender portal. Ensure that the retention period is appropriately configured and aligned with your organization's requirements.

    Here are some additional steps you can take to troubleshoot this issue:

    Check the Microsoft 365 Defender portal for any errors or warnings. Check the Microsoft 365 App connector logs for any errors. Restart the Microsoft 365 App connector. Reinstall the Microsoft 365 App connector.

    I hope this information helps.

    Regards,

    Abdal

    0 comments