Share via

Sentinel UEBA UserPeerAnlytic Table missing

Minghui Zou 186 Reputation points
2022-10-22T11:27:45.347+00:00

HI Experts

Million Thanks in advance! When I enabled the sentinel UEBA solution in my environment.
I could only see the following table
253251-image.png

where is the userPeeranalytics table? according to the following docs?

https://learn.microsoft.com/en-us/azure/sentinel/identify-threats-with-entity-behavior-analytics

Here are my connected data sources, for this table does it require specific data to appear in the workspace?

AAD logs AAPIP logs

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,109 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Bill Clarkson-Antill 10 Reputation points MVP
    2023-03-14T21:13:30.33+00:00

    Hey @Minghui Zou

    Have you enabled the UEBA Connectors in Sentinel, this will make the UserPeerAnalytic Table appear.

    See link ref: https://learn.microsoft.com/en-us/azure/sentinel/enable-entity-behavior-analytics

    Regards

    Bill

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.