Title: Users are missing some URLClickEvents data in the advanced hunting tab of the Microsoft Defender portal
User impact: Users were missing some URLClickEvents data in the advanced hunting tab of the Microsoft Defender portal.
More info: Specifically, URLClickEvents data gathered during the period from November 6, 2023 until the offending change was reverted on November 11th wasn’t processed as expected, resulting in that data not being visible through the advanced hunting tab.
Final status: We reverted the offending change and reprocessed the affected data. We confirmed through our telemetry that the reprocessing completed successfully.
Scope of impact: This issue may have affected any user attempting to view URLClickEvent data in the advanced hunting tab of the Microsoft Defender portal.
Start time: Monday, November 6, 2023, at 8:00 AM UTC
End time: Thursday, November 16, 2023, at 12:00 AM UTC
Root cause: A recent change to an uploader service component leveraged for event processing and reading from advanced hunting contained a configuration issue resulting in impact.
Next steps:
– We’re reviewing our component update analysis procedures to help better identify similar configuration problems prior to their implementation in the future.
This is the final update for the event.
Posted inUncategorized