Forum Discussion
(400) Bad Request : MS Defender Connection
Dear Community,
I am quite new to PowerBI .
I am trying to use a Microsoft shared MS Defender report (https://github.com/Azure/Azure-Sentinel/tree/master/Tools/MDO%20Power%20BI%20Dashboard#how-to-use-the-pbit-file)
We are an MS Defender Customer and I have PowerBI Pro license .
The problem is that when I open the report in PowerBI Desktop, I receive the following error for every table that the report is using i.e. :
Web.Contents failed to get contents from 'https://api.security.microsoft.com/api/advancedhunting/?key=EmailEvents%20%7C%20where%20Timestamp%20%3Eago(30d)%20%7C%20where%20isnotempty(ThreatTypes)%20%7C%20summarize%20count()%20by%20SenderFromDomain,%20bin(Timestamp,%201d)%20%7C%20sort%20by%20count_%20%20%7C%20take%2015' (400): Bad Request
I suspect that it has to do something with the MS Defender Schema...anyway ideas or how to correct it or how to troubleshoot ?
Does the PowerBI Desktop has any more detailed debug logs ?
- Anonymous3 years ago
Hi mbelsis ,
You can follow the step as below to diagnostic logs in Power BI Desktop.
File> Options and settings > Options > Diagnostics
For reference:
Power BI Desktop diagnostics collection
Here is an offical blog about common Microsoft 365 Defender REST API error codes. I hope it could help you solve your issue.
Best Regards,
Rico ZhouIf this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
1 Reply
- AnonymousNot applicable
Hi mbelsis ,
You can follow the step as below to diagnostic logs in Power BI Desktop.
File> Options and settings > Options > Diagnostics
For reference:
Power BI Desktop diagnostics collection
Here is an offical blog about common Microsoft 365 Defender REST API error codes. I hope it could help you solve your issue.
Best Regards,
Rico ZhouIf this post helps, then please consider Accept it as the solution to help the other members find it more quickly.