Microsoft 365 Alert – Service Degradation – Microsoft Defender for Cloud Apps – Some users may have seen delays for Microsoft Entra ID events and alerts in Microsoft Defender for Cloud Apps – RESOLVED

Announcements Arpan Das

23/09/2024 09:33:00 AM

NHSmail Reference: INC45822172

Microsoft Reference: CS895242

Issue Status: OPEN

Issue Description: Users may have seen delays for Microsoft Entra ID events and alerts in Microsoft Defender for Cloud Apps.

More info: Impacted events and alerts included but weren’t limited to:
– Anomaly detection
– Advanced hunting
– Activity policy
– Sentinel events

Final Update: 23/09/2024 09:43:00 AM – Microsoft have confirmed following an extended monitoring period that impact to end users has been remediated.

Scope of impact : Impact was specific to some users, who were served through the affected infrastructure, attempting to view Microsoft Entra ID events or alerts in Microsoft Defender for Cloud Apps.

Root cause: A code bug introduced in a recent update to service monitoring and analytics was causing delays in data processing for Microsoft Entra ID events and alerts in Microsoft Defender for Cloud Apps.

Next Steps: Microsoft are reviewing upcoming scheduled service updates for similar code regressions, to reduce or avoid similar impact in the future.