(400) Bad Request : MS Defender Connection

[mbelsis]

Dear Community, 

I am quite new to PowerBI .

I am trying to use a Microsoft shared MS Defender report  (https://github.com/Azure/Azure-Sentinel/tree/master/Tools/MDO%20Power%20BI%20Dashboard#how-to-use-th...

We are an MS Defender Customer and I have PowerBI Pro license . 

The problem is that when I open the report in PowerBI Desktop, I receive the following error for every table that the report is using i.e. :

Web.Contents failed to get contents from 'https://api.security.microsoft.com/api/advancedhunting/?key=EmailEvents%20%7C%20where%20Timestamp%20...' (400): Bad Request

I suspect that it has to do something with the MS Defender Schema...anyway ideas or how to correct it or how to troubleshoot ?

Does the PowerBI Desktop has any more detailed debug logs ?

[Anonymous · Accepted solution]

Hi @mbelsis ,

You can follow the step as below to diagnostic logs in Power BI Desktop.

File> Options and settings > Options > Diagnostics

For reference:

Power BI Desktop diagnostics collection

Here is an offical blog about common Microsoft 365 Defender REST API error codes. I hope it could help you solve your issue.

Best Regards,
Rico Zhou

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.