https://community.splunk.com/t5/Monitoring-Splunk/Windows-Defender-logs/m-p/680524#M10065 <P>We have had a second instance of this happening overnight.</P><P>Last nights update is 4.18.24020.7</P><P>The previous update that caused this issue was 4.18.23110.3</P><P>&nbsp;</P><P>Both are showing up in event viewer as event ID: 2014</P> Wed, 13 Mar 2024 11:06:12 GMT seanmartin 2024-03-13T11:06:12Z https://community.splunk.com/t5/Monitoring-Splunk/Windows-Defender-logs/m-p/680374#M10061 <P>Hi, I know as part of SPL-212687 this issue was fixed in 8.2.7 and 9.0+ however we have had some hosts drop their defender logs after receiving a Windows Defender update. These UFs are on version 9.0.2 but have still reported this issue.</P><P>Is there any known problem that would cause this?</P> Tue, 12 Mar 2024 09:16:45 GMT https://community.splunk.com/t5/Monitoring-Splunk/Windows-Defender-logs/m-p/680374#M10061 seanmartin 2024-03-12T09:16:45Z https://community.splunk.com/t5/Monitoring-Splunk/Windows-Defender-logs/m-p/680524#M10065 <P>We have had a second instance of this happening overnight.</P><P>Last nights update is 4.18.24020.7</P><P>The previous update that caused this issue was 4.18.23110.3</P><P>&nbsp;</P><P>Both are showing up in event viewer as event ID: 2014</P> Wed, 13 Mar 2024 11:06:12 GMT https://community.splunk.com/t5/Monitoring-Splunk/Windows-Defender-logs/m-p/680524#M10065 seanmartin 2024-03-13T11:06:12Z