Title: Users experienced delays of up to five hours for some activities and alerts in Microsoft Defender for Cloud Apps
User impact: Users may experienced delays of up to five hours for some activities and alerts in Microsoft Defender for Cloud Apps.
More info: Impact was specific to all activities on the AppCloudEvents & ApplogonEvents tables and some Threat Detection Alerts and Observations.
Final status: We’ve finished processing the backlog of delayed activity and alert data, and confirmed following a monitoring period that impact has been remediated.
Scope of impact: Impact was specific to some users who were served through the affected infrastructure.
Start time: Thursday, November 9, 2023, at 11:34 AM UTC
End time: Friday, November 10, 2023, at 12:42 AM UTC
Root cause: A section of infrastructure, responsible for regulating activities on the AppCloudEvents & ApplogonEvents tables, was unexpectedly performing below acceptable performance thresholds.
Next steps:
– We’re reviewing our activity regulation procedures to reduce or avoid similar impact in the future.
This is the final update for the event.
