Forum Discussion
JBUB_Accelerynt
Jul 07, 2020Brass Contributor
TiIndicators not showing up in ThreatIntelligenceIndicator Logs
It seems that around July 2nd, 7/2/2020, 9:17:26.272 PM UTC, all of our custom TiIndicators stopped showing up in our ThreatIntelligenceIndicator logs. All of the logic apps are running successful...
JBUB_Accelerynt
Jul 08, 2020Brass Contributor
Not sure who put this fix in, but we are seeing positive results now in both tenants. Nothing changed on our end. Any post-fix info would be great. Thanks again MS Sentinel Team!
- Ofer_ShezafJul 12, 2020
Microsoft
JBUB_Accelerynt : While we monitor for issues and try to preempt, I do recommend opening a support ticket in such a case. Whether instead of or in addition to a community post. While the community interaction is lively and quite fast, if something disrupts your service, we want to make sure we resolve it as soon as possible.
- JBUB_AcceleryntJul 14, 2020Brass Contributor
Ofer_Shezaf Thank you Ofer 😃
We have opened a ticket and I can confirm it is broken again. 3 separate tenants and the last threat intel entry that shows up in the logs is on the 10th. The logic apps run and I can return threat intel, but it's just not in the logs for use in analytic rules.
I encourage others to check their logs and make sure their rules are working. Or at least be aware log entries are missing.
- RijutaKapoorJul 15, 2020
Microsoft
JBUB_Accelerynt - Can you please send me the link to the support ticket? We would need the Tenant ID and Workspace ID in order to investigate the issue further.