Security Alerts gets delayed

[Petr Vlk]

We have set up security alerts in Office 365 for some events like privilege escalations.

The notification coming. But from December they get delayed. Sometimes hours, sometimes days, but now we receive events even after more than 10 days of the time when activity occurs.

Does someone sees the same? The notifications on CAS are triggered correctly in time.

[#2]

You mean the email notifications, or the actual events in the SCC Audit log section? In general, there is some delay with generating both, audit log entries can sometimes appear after a day or more, depending on the event type...

[#3]

I mean both. Both delays are understandable. But for example today we receive an e-mail alert to the activity which is 22 days old. This is too much. I have currently opened the case for it but without any meaningful progress.

[#4]

Did you ever get a solution to this? I have alerts configured just for admin changes and it sometimes takes 24hrs for the alert to come through. Obviously if something bad was happening in the system, I'd have missed it...!

[#5]

Unfortunately no at Security & Compliance Center. We go with a connection to Operations Management Suite, which has a pack for Office 365. With that alerts on the activities are almost instant.