Why can't I change the start date on my scheduled reports in Defender?

Steven Kadish - KHF 45 Reputation points
2023-10-06T15:23:25.8566667+00:00

I'm in Defender and I'm trying to schedule reports for Email & Collaboration (for instance, a weekly report on TPS Phish. I can schedule the reports, but when I scheduled weekly reports yesterday (Thursday) they started arriving today (Friday) with data from last Thursday to this Wednesday. I want my reports to contain data for Sunday to Saturday.

When I change the start date in the schedule it just reverts back to today.

Any help is appreciated!

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
3,912 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,228 questions
0 comments No comments
{count} votes

Accepted answer
  1. Himadri Das 75 Reputation points Student Ambassador
    2023-10-09T17:38:34.6733333+00:00

    Microsoft Defender reports are generated on a rolling basis, starting from the current date. This means that you cannot change the start date of a scheduled report to a date in the past.

    To get a report for the date range you want, you can use the following workarounds:

    1. Generate a custom report. When you generate a custom report, you can specify the start and end dates. To do this, go to Reports > Email & Collaboration > Custom Report.
    2. Schedule a daily report and then filter the results. Schedule a daily report for the time period you want to cover. Then, when you view the report, you can filter the results to show only the data for the dates you are interested in.

    Microsoft is aware of the limitation of not being able to change the start date of a scheduled report and is working on a solution. In the meantime, you can use one of the workarounds above to get the reports you need.

    Here is a more detailed explanation of the second workaround:

    1. Go to Reports > Email & Collaboration > Schedule Report.
    2. Select the report you want to schedule and click Next.
    3. On the Schedule page, select Daily and enter the start and end dates for the report.
    4. Click Next and then Finish to schedule the report.

    Once the report is scheduled, you will receive it in your inbox every day. To filter the results, open the report and click the Filter button. In the Filter pane, select the Date Range filter and enter the start and end dates for the data you want to see. Click Apply to filter the results.

    I hope this helps!

    0 comments No comments

0 additional answers

Sort by: Most helpful