Sentinel UEBA UserPeerAnlytic Table missing

Question

HI Experts

Million Thanks in advance! When I enabled the sentinel UEBA solution in my environment.
I could only see the following table

where is the userPeeranalytics table? according to the following docs?

https://learn.microsoft.com/en-us/azure/sentinel/identify-threats-with-entity-behavior-analytics

Here are my connected data sources, for this table does it require specific data to appear in the workspace?

AAD logs AAPIP logs

Answer 1

Hey @Minghui Zou

Have you enabled the UEBA Connectors in Sentinel, this will make the UserPeerAnalytic Table appear.

See link ref: https://learn.microsoft.com/en-us/azure/sentinel/enable-entity-behavior-analytics

Regards

Bill