Failed to create create streaming API settings in Microsoft Defender error

Khin Myat Mon 0 Reputation points
2024-01-17T11:04:29.81+00:00

I am trying to create streaming API settings in Microsoft Defender to forward events to Azure storage and event hub, which I have created in Azure protal with a free trial subscription . I am trying to export my data to there. When trying to add streaming API from Microsoft Defender XDR setting. It says my storage account ID is not accessible yet 'Try again when storage provisioning is complete'". Could someone please help me how to resolve this and connect to my azure successfully ?

Note : It shows Succeeded for provisioning state for this storage account when I checked in Azure.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,490 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Khin Myat Mon 0 Reputation points
    2024-01-17T15:26:49.9766667+00:00

    I got it now. Thanks to the Streaming API documentation of Microsoft. I need to register one thing Azure Subscription -> Resource Providers > Microsoft. insights ( register ). It is working well now. :')

    0 comments No comments

  2. Givary-MSFT 35,216 Reputation points Microsoft Employee
    2024-01-18T05:33:16.76+00:00

    @Khin Myat Mon I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

    Issue: trying to create streaming API settings in Microsoft Defender to forward events to Azure storage and event hub, which I have created in Azure protal with a free trial subscription . I am trying to export my data to there. When trying to add streaming API from Microsoft Defender XDR setting. It says my storage account ID is not accessible yet 'Try again when storage provisioning is complete'". Could someone please help me how to resolve this and connect to my azure successfully ? Note : It shows Succeeded for provisioning state for this storage account when I checked in Azure.

    Resolution: Resolved by @Khin Myat Mon Thanks to the Streaming API documentation of Microsoft. I need to register one thing Azure Subscription -> Resource Providers > Microsoft. insights ( register ). It is working well now.

    If you have any other questions or are still running into more issues, please let me know.
    Thank you again for your time and patience throughout this issue.

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.