Microsoft 365 Alert – Service Degradation – Microsoft 365 suite – Some users may encounter delays for some audit records in Microsoft Purview Audit (Standard) – RESOLVED

Announcements Habiba Tabasum

04/03/2024 10:20:00 AM

NHSmail Reference: INC41744119

Microsoft Reference: MO723510

Issue Status: RESOLVED

Issue Description: Users may encounter delays for some audit records in Microsoft Purview Audit (Standard).

More info: Users may also see the following audit records incorrectly duplicated: “Workload == AzureActiveDirectory” and “RecordType == AzureActiveDirectory”.

Final Update: 11/03/2024 08:58:00 AM – Microsoft completed deploying the fix to the affected infrastructure that will utilize an alternative way to re-ingest the logs and confirmed that this has remediated impact. They are continuing to review system logs and telemetry to identify the root cause of the issue.

Scope of impact: Impact is specific to some users who are served through the affected infrastructure.

Root cause: An issue with the way logs are ingested by the service may have caused delays of up to 14 days for some audit records in Microsoft Purview Audit (Standard).