Issues with MS Defender for Cloud Alerts Not Appearing on Security Portal

Question

Issues with MS Defender for Cloud Alerts Not Appearing on Security Portal

sparsh ladani 0

Experiencing an issue where alerts generated in Microsoft Defender for Cloud on portal.azure.com are not visible in the alerts section of the security.microsoft.com portal. Environment settings have been configured in Azure, all plans enabled for the demo, and the option to display all alerts on security.microsoft.com turned on.

Seeking assistance from the community to resolve this issue.

Jose Benjamin Solis Nolasco 4,986 Reputation points

2025-05-12T01:14:35.9+00:00
Hello Sparsh,

I understand you're experiencing an issue where alerts generated in Microsoft Defender for Cloud on the Azure portal are not appearing in the alerts section Defender portal. Let's explore potential reasons and solutions for this behavior.

Check Alert Severity: Ensure that the alerts you're expecting to see are of a severity level that is integrated into the Microsoft Defender portal.

Verify Permissions: Confirm that your user account has the necessary RBAC roles assigned to view Defender for Cloud alerts

Configure Alert Service Settings: In the Microsoft Defender portal, navigate to Settings > Microsoft Defender XDR, and ensure that the alert service settings are configured to include Defender for Cloud alerts.

Use Subscription ID Filter: Apply the subscription ID filter in the alert and incident queues to view alerts associated with a specific subscription.

Allow Time for Alert Propagation: If you've recently configured Defender for Cloud, wait for some time to allow alerts to propagate to the Microsoft Defender portal.

I hope this helps. Let me know if you have any further questions or need additional assistance.
Jose Benjamin Solis Nolasco 4,986 Reputation points

2025-05-13T03:26:04.6866667+00:00

Just following up, Do you need more guidance or assistance ?
sparsh ladani 0 Reputation points

2025-05-13T15:13:40.9466667+00:00

Hello Jose,

I will try out what you said and if I need further help then I will surely reach out to you!
Jyotishree Moharana 1,850 Reputation points Microsoft External Staff Moderator

2025-05-14T18:15:36.2033333+00:00

Hello @sparsh ladani,

Following up to check if you have any further questions or query, please do let us know.
Jyotishree Moharana 1,850 Reputation points Microsoft External Staff Moderator

2025-05-15T15:52:37.16+00:00

Hello @sparsh ladani,

Following up to check if you have any further questions or query, please do let us know.
sparsh ladani 0 Reputation points

2025-05-16T00:06:24.9033333+00:00

Hi @Jyotishree Moharana ,

I tried what you told me to do

I have the option for cloud apps enabled. For the roles here is what my current permission looks like:

Do I need to check anything else?
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-19T11:03:03.43+00:00

Hello sparsh ladani, does the signed in user account has Security Reader role assigned, Refer User roles and permissions - Microsoft Defender for Cloud | Microsoft

Also Go to security.microsoft.com → Data connectors → Microsoft Defender for Cloud. Make sure that the connector is enabled and healthy:

Let me know if any further queries - feel free to reach out!
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-20T03:12:37.3033333+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-21T03:50:41.03+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
sparsh ladani 0 Reputation points

2025-05-21T09:46:54.4233333+00:00

Hi @Rukmini sorry i got busy with dome other things, but i will try it out and see if it works or not and let you know!
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-21T09:48:48.0766667+00:00

sparsh ladani, Sure please let me know if any queries - feel free to reach out!
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-22T03:47:45.7466667+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-23T03:22:50.8933333+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
sparsh ladani 0 Reputation points

2025-05-23T13:58:24.2433333+00:00

Hi @rukmini I saw my data connector and it is in healthy condition. I followed the documentation and checked the health of connector but I'm not able to see any insight? Here is a screenshot attached below:
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-26T10:04:02.54+00:00

Hello sparsh ladani, can you please recheck the data connector by : Go to security.microsoft.com → Data connectors → Microsoft Defender for Cloud.
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-27T06:51:51.77+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
sparsh ladani 0 Reputation points

2025-05-27T14:08:30.18+00:00

Hi Rukmini, I rechecked my connector and it is connected and I'm able to see a green symbol on it as well!
SrideviM 5,725 Reputation points Microsoft External Staff Moderator

2025-05-28T09:46:32.7466667+00:00

Hello sparsh ladani,

Thanks for confirming that the connector is showing healthy with the green status.

To better understand what’s happening, could you please share screenshots from both portals? One from portal.azure.com showing the alerts listed in Microsoft Defender for Cloud, and another from security.microsoft.com showing the alerts section where they don’t appear.

This will help us see if it’s a display issue, a filtering setting, or something else preventing the alerts from showing up.

1 answer

Your answer

Jose Benjamin Solis Nolasco 4,986 Reputation points

2025-05-12T01:14:35.9+00:00

Hello Sparsh,

I understand you're experiencing an issue where alerts generated in Microsoft Defender for Cloud on the Azure portal are not appearing in the alerts section Defender portal. Let's explore potential reasons and solutions for this behavior.

Check Alert Severity: Ensure that the alerts you're expecting to see are of a severity level that is integrated into the Microsoft Defender portal.

Verify Permissions: Confirm that your user account has the necessary RBAC roles assigned to view Defender for Cloud alerts

Configure Alert Service Settings: In the Microsoft Defender portal, navigate to Settings > Microsoft Defender XDR, and ensure that the alert service settings are configured to include Defender for Cloud alerts.

Use Subscription ID Filter: Apply the subscription ID filter in the alert and incident queues to view alerts associated with a specific subscription.

Allow Time for Alert Propagation: If you've recently configured Defender for Cloud, wait for some time to allow alerts to propagate to the Microsoft Defender portal.

I hope this helps. Let me know if you have any further questions or need additional assistance.
Jose Benjamin Solis Nolasco 4,986 Reputation points

2025-05-13T03:26:04.6866667+00:00

Just following up, Do you need more guidance or assistance ?
sparsh ladani 0 Reputation points

2025-05-13T15:13:40.9466667+00:00

Hello Jose,

I will try out what you said and if I need further help then I will surely reach out to you!
Jyotishree Moharana 1,850 Reputation points Microsoft External Staff Moderator

2025-05-14T18:15:36.2033333+00:00

Hello @sparsh ladani,

Following up to check if you have any further questions or query, please do let us know.
Jyotishree Moharana 1,850 Reputation points Microsoft External Staff Moderator

2025-05-15T15:52:37.16+00:00

Hello @sparsh ladani,

Following up to check if you have any further questions or query, please do let us know.
sparsh ladani 0 Reputation points

2025-05-16T00:06:24.9033333+00:00

Hi @Jyotishree Moharana ,

I tried what you told me to do

I have the option for cloud apps enabled. For the roles here is what my current permission looks like:

Do I need to check anything else?
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-19T11:03:03.43+00:00

Hello sparsh ladani, does the signed in user account has Security Reader role assigned, Refer User roles and permissions - Microsoft Defender for Cloud | Microsoft

Also Go to security.microsoft.com → Data connectors → Microsoft Defender for Cloud. Make sure that the connector is enabled and healthy:

Let me know if any further queries - feel free to reach out!
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-20T03:12:37.3033333+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-21T03:50:41.03+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
sparsh ladani 0 Reputation points

2025-05-21T09:46:54.4233333+00:00

Hi @Rukmini sorry i got busy with dome other things, but i will try it out and see if it works or not and let you know!
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-21T09:48:48.0766667+00:00

sparsh ladani, Sure please let me know if any queries - feel free to reach out!
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-22T03:47:45.7466667+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-23T03:22:50.8933333+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
sparsh ladani 0 Reputation points

2025-05-23T13:58:24.2433333+00:00

Hi @rukmini I saw my data connector and it is in healthy condition. I followed the documentation and checked the health of connector but I'm not able to see any insight? Here is a screenshot attached below:
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-26T10:04:02.54+00:00

Hello sparsh ladani, can you please recheck the data connector by : Go to security.microsoft.com → Data connectors → Microsoft Defender for Cloud.
Rukmini 3,921 Reputation points Microsoft External Staff Moderator

2025-05-27T06:51:51.77+00:00

Hello sparsh ladani, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
sparsh ladani 0 Reputation points

2025-05-27T14:08:30.18+00:00

Hi Rukmini, I rechecked my connector and it is connected and I'm able to see a green symbol on it as well!
SrideviM 5,725 Reputation points Microsoft External Staff Moderator

2025-05-28T09:46:32.7466667+00:00

Hello sparsh ladani,

Thanks for confirming that the connector is showing healthy with the green status.

To better understand what’s happening, could you please share screenshots from both portals? One from portal.azure.com showing the alerts listed in Microsoft Defender for Cloud, and another from security.microsoft.com showing the alerts section where they don’t appear.

This will help us see if it’s a display issue, a filtering setting, or something else preventing the alerts from showing up.

Answer 1

Hello @sparsh ladani,

Thank you for the provided update. We would also advise to verify the below additional troubleshooting points as well for more guidance.

First, check if the data connector for Microsoft Defender for Cloud is enabled and healthy in the Microsoft Defender XDR settings under Settings > Microsoft Defender XDR > Data connectors. Without this connector, alerts won't sync between the two platforms.

Additionally, you can verify if the relevant Azure subscriptions and Log Analytics workspaces are properly onboarded to Defender for Cloud and that all necessary Defender plans (e.g., Defender for Servers, Defender for SQL) are enabled. It's also important to note that not all alerts particularly low-severity or informational ones are forwarded to Defender XDR by default.

Another common issue involves role-based access control (RBAC) ensure your account has the appropriate permissions, such as Security Reader or Security Admin roles in Microsoft Defender XDR, to view alerts. Occasionally, synchronization delays can cause brief discrepancies between portals, so allow a few minutes and ensure that no filters are inadvertently hiding the alerts. You can also use Advanced Hunting in Defender XDR with a Kusto query (e.g., querying the SecurityAlert table for alerts with the ProviderName set to "Azure Security Center") to check whether alerts are being ingested at all. If this query returns no results, it strongly suggests a connector or configuration issue preventing alert visibility.

Jonathan Benjamin 0 Reputation points

2025-08-06T05:33:00.2333333+00:00

Firstly, This setting (Microsoft Defender XDR settings under Settings > Microsoft Defender XDR > Data connectors.) does not exist any more.

Secondly, isn't this integration supposed to be native?

This still doesn't work for our subscription.

Please help.

Share via

Issues with MS Defender for Cloud Alerts Not Appearing on Security Portal

1 answer

Your answer