Message CenterMajor changeUpdated messageAdmin impactRetirement

MC1077861 — Microsoft Defender for Cloud Apps: SIEM agents will retire

MC1077861Microsoft Defender XDRplanForChangeUpdated: 23 December 2025

Microsoft Defender for Cloud Apps will retire SIEM agents, with no new agents configurable after June 19, 2025. The rollout is paused, and users are advised to transition to unified APIs and SIEM solutions for alerts and activity data to ensure continuity and enhanced capabilities.

Open in Message Center View in the live feed
Applies to: Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).