Forum Discussion
danny_grasso
Apr 03, 2024Brass Contributor
Investigation state Queued
I see a number of messages in our Defender XDR Incidents with a status of Queued. What does this status mean?
This appears to only be related to Defender for Office 365 incidents, usually email reported as junk/phish/notjunk etc type of incidents.
Regardless of whether I investigate or change the status of the incident, in remains in the Incidents list as queued. I cannot find clear documentation on what this state means or what action is required to resolve/close the incident.
Can anyone shed any light on the what the queued state means and how to resolve a queued incident.
- Alex VerboonCopper Contributor
I still see this as an investigation status for a couple of incidents, any update?
- HeikeRitter
Microsoft
Thank you Danny for your question. This is actually a display issue, and the team has already investigated it and will work on a solution to address this misleading status.- ThoFordBrass ContributorAny update on this display issue, seems like its been there forever...