Defender for Clouds - alert details hidden in Activity logs of log analytics

Hadi D 10

Hey,

from Tuesday 1 Aug 2023 - 6 PM (New Zealand time) we started seeing alerts from Defender for Clouds appear with hidden information just like this: "******" in the Activity Logs of the log analytics page. but we can see the full details of the alert when viewing them through Defender for Clouds.

here is a snippet from what we see in the Activity Logs when we click on "Activate Alert" event:


    "properties": {
        "analyticSubtype": "***************",
        "answers": "*******",

has there been any change by Microsoft related to this?

JamesTran-MSFT 36,496 Reputation points Microsoft Employee

2023-08-22T17:37:32.76+00:00

@Hadi D

Thank you for your post and I apologize for the delayed response!

My teammate is currently looking into your issue and will update as soon as possible.

If you have any other questions in the meantime, please let me know. Thank you for your time and patience throughout this issue.
Fiona Matu 86 Reputation points Microsoft Employee

2024-02-13T17:46:42.4466667+00:00
Hi @Hadi D ,

I am not familiar with the issue you may be experiencing and have tried looking for documentation around it but haven't found any so far. Typically, Microsoft does not hide or mask data without prior notification to users or a clear update in their documentation.

This could be a potential issue with permissions or a bug. Try doing the following:

Confirm the permissions of the user account viewing these logs.

Check with Microsoft's support or community forums to see if there have been any updates or changes that might have caused this issue.

Report this issue to Microsoft's support team. They can provide the most accurate information on whether there have been any changes on their end that would cause this behavior.

To learn more on Azure Defender's alerts, you can refer to Microsoft's official documentation: Understand Azure Defender's alerts. For more information on Azure activity logs, you can refer to: Overview of Azure Activity logs

Share via

Defender for Clouds - alert details hidden in Activity logs of log analytics