Skip to content

Commit a0afacf

Browse files
committed
fixes
1 parent 5c681af commit a0afacf

File tree

2 files changed

+7
-7
lines changed

2 files changed

+7
-7
lines changed

defender-endpoint/api/raw-data-export-event-hub.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 10/24/2023
18+
ms.date: 06/28/2024
1919
---
2020

2121
# Configure Microsoft Defender for Endpoint to stream Advanced Hunting events to your Azure Event Hubs
@@ -36,14 +36,14 @@ ms.date: 10/24/2023
3636

3737
1. Create an [event hub](/azure/event-hubs/) in your tenant.
3838

39-
2. Sign in to your [Azure tenant](https://ms.portal.azure.com/), go to **Subscriptions > Your subscription > Resource Providers > Register to Microsoft.insights**.
39+
2. Sign in to your [Azure tenant](https://ms.portal.azure.com/), go to **Subscriptions** > **Your subscription** > **Resource Providers** > **Register to Microsoft.insights**.
4040

4141
> [!IMPORTANT]
4242
> Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.
4343
4444
## Enable raw data streaming
4545

46-
1. Sign in to the [Microsoft Defender XDR](https://security.microsoft.com) as a ***Security Administrator***.
46+
1. Sign in to the [Microsoft Defender portal](https://security.microsoft.com) as a ***Security Administrator***.
4747

4848
2. Go to the [Data export settings page](https://security.microsoft.com/securitysettings/defender/raw_data_export) in the Microsoft Defender portal.
4949

@@ -94,7 +94,7 @@ ms.date: 10/24/2023
9494

9595
To get the data types for event properties, do the following:
9696

97-
1. Sign in to [Microsoft Defender XDR](https://security.microsoft.com) and go to [Advanced Hunting page](https://security.microsoft.com/hunting-package).
97+
1. Sign in to [Microsoft Defender portal](https://security.microsoft.com) and go to [Advanced Hunting page](https://security.microsoft.com/hunting-package).
9898

9999
2. Run the following query to get the data types mapping for each event:
100100

@@ -108,13 +108,13 @@ To get the data types for event properties, do the following:
108108

109109
:::image type="content" source="../media/machine-info-datatype-example.png" alt-text="The Event Hubs resource Id-2" lightbox="../media/machine-info-datatype-example.png":::
110110

111-
## Related topics
111+
## Related articles
112112

113113
- [Stream Microsoft Defender XDR events | Microsoft Learn](/defender-xdr/streaming-api)
114-
115114
- [Overview of Advanced Hunting](/defender-xdr/advanced-hunting-overview)
116115
- [Microsoft Defender for Endpoint streaming API](raw-data-export.md)
117116
- [Stream Microsoft Defender for Endpoint events to your Azure storage account](raw-data-export-storage.md)
118117
- [Azure Event Hubs documentation](/azure/event-hubs/)
119118
- [Troubleshoot connectivity issues - Azure Event Hubs](/azure/event-hubs/troubleshooting-guide)
119+
120120
[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../../includes/defender-mde-techcommunity.md)]

defender-endpoint/api/raw-data-export-storage.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -89,7 +89,7 @@ ms.date: 12/18/2020
8989

9090
In order to get the data types for our events properties, do the following:
9191

92-
1. Sign in to [Microsoft Defender XDR](https://security.microsoft.com) and go to [Advanced Hunting page](https://security.microsoft.com/hunting-package).
92+
1. Sign in to [Microsoft Defender portal](https://security.microsoft.com) and go to [Advanced Hunting page](https://security.microsoft.com/hunting-package).
9393

9494
2. Run the following query to get the data types mapping for each event:
9595

0 commit comments

Comments
 (0)