Share via

Microsoft Defnder for Cloud - old/unrelevent resources shown in Inventory after 24 hours deletion

Inbal Silis 116 Reputation points Microsoft Employee
2022-04-25T15:28:34.09+00:00

Why the Inventory in Defender for Cloud present still old/deleted resources?
I deleted resources 2 days back and I still see it in the inventory.
Talking on VMs, Subnets, VNets, AKS

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,469 questions
0 comments
Accepted answer
  1. Andrew Blumhardt 9,866 Reputation points Microsoft Employee
    2022-04-25T16:13:46.31+00:00

    Defender for Cloud relies on an Azure Monitor workspace and the Azure Resource Graph. The data in these tables may take time to drop from your views. Especially anything originating from the workspace. This data is largely immutable and cannot be modified or removed. I assume you many need to let these records expire. It depends on how the view you are using is designed.

    I am not certain if the resource graph performs the same way. Here are some related queries that may help:

    https://learn.microsoft.com/en-us/azure/defender-for-cloud/resource-graph-samples

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Inbal Silis 116 Reputation points Microsoft Employee
    2022-04-26T05:20:17.703+00:00

    around 36 hours from deletion it disappeared.
    Thanks.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.