Jan 23 2018
- last edited on
May 24 2021
We have set up security alerts in Office 365 for some events like privilege escalations.
The notification coming. But from December they get delayed. Sometimes hours, sometimes days, but now we receive events even after more than 10 days of the time when activity occurs.
Does someone sees the same? The notifications on CAS are triggered correctly in time.
Jan 23 2018 10:15 AM
You mean the email notifications, or the actual events in the SCC Audit log section? In general, there is some delay with generating both, audit log entries can sometimes appear after a day or more, depending on the event type...
Jan 23 2018 11:05 AM
Mar 20 2018 10:50 AM
Did you ever get a solution to this? I have alerts configured just for admin changes and it sometimes takes 24hrs for the alert to come through. Obviously if something bad was happening in the system, I'd have missed it...!
Mar 21 2018 08:24 AM
Unfortunately no at Security & Compliance Center. We go with a connection to Operations Management Suite, which has a pack for Office 365. With that alerts on the activities are almost instant.