Microsoft Sentinel workspace not appearing in Defender Analytics

Arya Madhu 0 Reputation points
2026-09-18T08:11:34.57+00:00

I have a Microsoft Sentinel workspace that shows as Primary and Connected under Microsoft Defender → Settings → Microsoft Sentinel → SIEM Workspaces.

However, under Microsoft Defender → Microsoft Sentinel → Analytics → Select a Workspace, the selector shows 0 items, so the workspace cannot be selected.

The account has the required permissions, and I have already tried disconnecting and reconnecting the workspace, but the issue persists.

There was also an older Sentinel workspace that was deleted before the current workspace was created. I recovered the old workspace from the Log Analytics recycle bin, but it still does not appear in the Defender Sentinel workspace list.

Has anyone experienced this issue, and is there a supported way to refresh or fix the Sentinel workspace registration/synchronization in the Defender portal?

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.