Title: Some users may experience delays of up to three hours for alerts and observations in Microsoft Defender for Cloud Apps
User impact: Users may have experienced delays of up to three hours for alerts and observations in Microsoft Defender for Cloud Apps.
Final status: The backlog of accumulated data has been cleared, and we’ve confirmed via telemetry that impact has been remediated.
Scope of impact: Some users who utilized the subset of the Microsoft Defender for Cloud Apps service infrastructure that entered an unhealthy state for alerts and observations may have experienced delays of up to three hours.
Start time: Tuesday, November 7, 2023, at 3:42 PM UTC
End time: Tuesday, November 7, 2023, at 7:15 PM UTC
Root cause: A subset of the Microsoft Defender for Cloud Apps service infrastructure, which was responsible for regulating alerts and observations, entered an unhealthy state, causing impact.
Next steps:
– We’re reviewing the subset of the Microsoft Defender for Cloud Apps service infrastructure to determine what caused this infrastructure to enter an unhealthy state so we can prevent similar issues from occurring in the future.
This is the final update for the event.
