Title: Some users may have encountered delays of up to three hours for activities in Microsoft Defender for Cloud Apps
User impact: Users may have encountered delays of up to three hours for activities in Microsoft Defender for Cloud Apps.
More info: Impact was specific to Microsoft Defender for Identity activities in Advanced Hunting.
Final status: We’ve confirmed that redirecting the traffic to an alternate healthy infrastructure has fully recovered the delay for activities and overall backlog.
Scope of impact: Impact was specific to some users who are served through the affected infrastructure.
Start time: Monday, November 6, 2023, at 9:00 AM UTC
End time: Monday, November 6, 2023, at 5:45 PM UTC
Root cause: A networking issue in a section of infrastructure, responsible for processing Microsoft Defender for Identity activities in Advanced Hunting, was resulting in impact.
Next steps:
– We’re analyzing networking data and trends on the affected infrastructure to help prevent this problem from happening again.
This is the final update for the event.