Resolved -
This incident has been resolved.
Mar 21, 15:46 UTC
Update -
We are continuing to monitor for any further issues.
Jan 23, 16:01 UTC
Monitoring -
Since 14:00 UTC we no longer have backlogs, but we keep monitoring our backend infrastructure to make sure it's stable
Jan 23, 16:01 UTC
Identified -
User impact: Users may encounter delays of up to several hours for activities in Microsoft Defender for Identity.
More info: Affected users may encounter the delays for activities in the User Interface (UI) and in Advanced Hunting.
Current status: We've identified that a section of infrastructure, responsible for processing activities in Microsoft Defender for Identity, is unexpectedly performing below acceptable performance thresholds which is causing delays and a backlog of activity data. We've optimized traffic and performance parameters on the affected infrastructure to mitigate impact. However, we're monitoring the accumulation of backlogged data as it drains, and expect to have a full remediation timeline by our next scheduled update.
Scope of impact: Impact is specific to users who are served through the affected infrastructure.
Root cause: Root cause: A section of infrastructure, responsible for processing activities in Microsoft Defender for Identity, is unexpectedly performing below acceptable performance thresholds which is causing delays and a backlog of activity data.
Jan 23, 14:44 UTC