Download a CSV report

Microsoft Defender for Cloud has the ability to export all alerts and recommendations to a CSV file. This feature is useful when you want to analyze the data in a different tool or share it with others.

Tip

Due to Azure Resource Graph limitations, the reports are limited to a file size of 13,000 rows. If you see errors related to too much data being exported, try limiting the output by selecting a smaller set of subscriptions to be exported.

Note

These reports contain alerts and recommendations for resources from the currently selected subscriptions.

Prerequisites

Export alerts to a CSV file

  1. Sign in to the Azure portal.

  2. Search for and select Microsoft Defender for Cloud.

  3. Select Security alerts.

  4. Select Download CSV report.

    Screenshot that shows how to download alerts data as a CSV file.

Export recommendations to a CSV file

  1. Sign in to the Azure portal.

  2. Search for and select Microsoft Defender for Cloud.

  3. Select Recommendations.

  4. Select Download CSV report.

Next step