Edit

Download alerts and recommendations as CSV reports in Defender for Cloud

Microsoft Defender for Cloud has the ability to export all alerts and recommendations to a CSV file. This feature is useful when you want to analyze the data in a different tool or share it with others.

Tip

Due to Azure Resource Graph limitations, the reports are limited to a file size of 25,000 rows. If you see errors related to too much data being exported, try limiting the output by selecting a smaller set of subscriptions to be exported.

Note

These reports contain alerts and recommendations for resources from the currently selected subscriptions.

Prerequisites

Before you export alerts or recommendations, make sure you meet the following prerequisites:

Export alerts to a CSV file

To export your security alerts to a CSV file, follow these steps:

  1. Sign in to the Azure portal.

  2. Search for and select Microsoft Defender for Cloud.

  3. Select Security alerts.

  4. Select Download CSV report.

    Screenshot that shows how to download alerts data as a CSV file.

Export recommendations to a CSV file

To export your security recommendations to a CSV file, follow these steps:

  1. Sign in to the Azure portal.

  2. Search for and select Microsoft Defender for Cloud.

  3. Select Recommendations.

  4. Select Download CSV report.

Next steps