Share via

Azure Security Center inventory not updating

Ashley Donaldson 1 Reputation point
2021-01-14T00:04:05.417+00:00

I'm a global admin for my tenancy, and have observed some issues relating to the Azure Security Center inventory.

When I create VMs, I would expect them to appear in the ASC inventory. Instead, it took several hours for it to appear. I don't see any documentation saying I should expect this (and the training material at https://learn.microsoft.com/en-us/learn/modules/secure-vms-with-azure-security-center/5-exercise-configure-endpoint-security suggests it should be immediate).

In addition, I would expect that VMs I've deleted would no longer be present (or at least I'd like to be able to remove them). Instead, items that I deleted a week ago are still hanging around and giving recommendations about how I should make them more secure.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,281 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,541 Reputation points Microsoft Employee
    2021-01-14T23:41:52.373+00:00

    @Ashley Donaldson
    Thank you for your post!

    When it comes to ASC inventory, the inventory view lists your Security Center connected resources from a Cloud Security Posture Management (CSPM) perspective. The filters don't return every resource in your environment; only the ones with outstanding (or 'active') recommendations.

    For example, the following screenshot shows a user with access to 38 subscriptions but only 10 currently have recommendations. So when they filter by Resource type = Subscriptions, only those 10 subscriptions with active recommendations appear in the inventory:
    56852-image.png

    If you're still having issues with ASC and would like to work closer with our support engineers on this issue, please let me know.
    Thank you for your time and patience throughout this issue.