Forum Discussion
Missing events in IdentityLogonEvents table since 26 november 6:30PM
All,
We have a couple customers who do not have any events in IdentityLogonEvents table since 26 november 6:30PM
when I run this query:
IdentityLogonEvents
|where Timestamp > ago(14d)
|where Application startswith "Active Directory"
|sort by Timestamp desc
The ingestion stops on 26 november 6:30PM
Do you also experience the same behavior?
best regards
Arjan
3 Replies
- LiorShapira
Microsoft
Our team is aware of a delay in sending activities to the M365D portal. It's supposed to be resolved as soon as possible. If you continue to have issues in the next week, please contact me (t-lshapira@microsoft.com).- Hi Lior,
Would there possibly be a similar issue?
I am face with a case, where the log timestamp is in mid May and the timegenerated is in July.
This appears to be like a month and a half of delayed ingestion.
May I reach out to you via email with additional information?
Thank you.- LiorShapira
a-rapsomanikis Yes, please send me an email (t-lshapira@microsoft.com) with an example so we can investigate it.
