Download a CSV report

Microsoft Defender for Cloud has the ability to export all alerts and recommendations to a CSV file. This feature is useful when you want to analyze the data in a different tool or share it with others.

Tip

Due to Azure Resource Graph limitations, the reports are limited to a file size of 13,000 rows. If you see errors related to too much data being exported, try limiting the output by selecting a smaller set of subscriptions to be exported.

Note

These reports contain alerts and recommendations for resources from the currently selected subscriptions.

Prerequisites

• You need a Microsoft Azure subscription. If you don't have an Azure subscription, you can sign up for a free subscription.

• You must enable Microsoft Defender for Cloud on your Azure subscription.

Export alerts to a CSV file

1. Sign in to the Azure portal.

2. Search for and select Microsoft Defender for Cloud.

3. Select Security alerts.

4. Select Download CSV report.

   

Export recommendations to a CSV file

1. Sign in to the Azure portal.

2. Search for and select Microsoft Defender for Cloud.

3. Select Recommendations.

4. Select Download CSV report.

Next step

Security alerts schemas