Azure Active Directory logs are lagging

Microsoft warned that customers might have noticed unusual delays in logging data from Azure AD and other Azure tools

Summary of Impact: Between 21:35 UTC on 31 May and 09:54 UTC on 01 Jun 2022, customers may have experienced significant delays in availability of logging data for resources such as sign in and audit logs for Azure Active Directory and other Azure Services, accessing tools such as Azure Portal, MSGraph, Log Analytics, PowerShell, and/or Application Insights. This impact may have also resulted in missed or misfired alerts.

During this time, Azure Resource Manager dependent services may have also experienced CRUD (create, read, update and delete) operation failures, with some requests that experienced failures while communicating with other Azure services.

Microsoft has now rolled out a hotfix for the issue, which engineers determined had been caused by a “recent change to the underlying infrastructure”. 

Microsoft say “We will continue to investigate to establish the full root cause and prevent future occurrences”

Microsoft also note that ” We determined that a recent change to the underlying infrastructure caused customer impact”.

It is important to note that this incident follows the launch of the new Microsoft Entra product family (https://www.microsoft.com/security/blog/2022/05/31/secure-access-for-a-connected-worldmeet-microsoft-entra/) .

From Microsoft site about Entra-” Microsoft Entra is our new product family that encompasses all of Microsoft’s identity and access capabilities. The Entra family includes Microsoft Azure Active Directory (Azure AD), as well as two new product categories: Cloud Infrastructure Entitlement Management (CIEM) and decentralized identity. The products in the Entra family will help provide secure access to everything for everyone, by providing identity and access management, cloud infrastructure entitlement management, and identity verification”

SHMUEL H.

Leave a Reply

Discover more from Rafael IT Blog

Subscribe now to keep reading and get access to the full archive.

Continue reading