SecurityInsight settings · Settings > Collection scope & limits

Defender for Cloud recommendations

Key	SI_CollectDefenderRecommendations
Where	Settings > Collection scope & limits > Extra details
Type	On / off
Default	On: recommendations are collected on every Azure run
Edition	Community
Confirmation	SecurityInsight asks you to confirm before it is switched off.

What it does

Whether the Azure engine also collects every unhealthy Defender for Cloud recommendation into its own table for the Risk Analysis reports.

When enabled

recommendations are collected on every Azure run

When disabled

Setting it to false skips the recommendations step: the Azure run is a little shorter and ingests less data, but reports have no Defender for Cloud recommendation findings.

Risk and how to reverse it

Defender for Cloud recommendations are no longer collected: those findings disappear from the reports (they are not fixed). Reversible: the next Azure run collects them again.

Requires

Nothing else.