A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments
Microsoft Sentinel workspace not appearing in Defender Analytics
I have a Microsoft Sentinel workspace that shows as Primary and Connected under Microsoft Defender → Settings → Microsoft Sentinel → SIEM Workspaces.
However, under Microsoft Defender → Microsoft Sentinel → Analytics → Select a Workspace, the selector shows 0 items, so the workspace cannot be selected.
The account has the required permissions, and I have already tried disconnecting and reconnecting the workspace, but the issue persists.
There was also an older Sentinel workspace that was deleted before the current workspace was created. I recovered the old workspace from the Log Analytics recycle bin, but it still does not appear in the Defender Sentinel workspace list.
Has anyone experienced this issue, and is there a supported way to refresh or fix the Sentinel workspace registration/synchronization in the Defender portal?