{"id":16442,"date":"2026-05-21T23:01:06","date_gmt":"2026-05-21T14:01:06","guid":{"rendered":"https:\/\/m365jp.net\/?p=16442"},"modified":"2026-05-21T23:15:25","modified_gmt":"2026-05-21T14:15:25","slug":"servicerestored-dz1316705-microsoft-defender-xdr-some-admins-may-experience-a-gap-in-security-telemetry-data-and-alerts-in-microsoft-defender-for-endpoint-and-identity","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-05-21-servicerestored-dz1316705-microsoft-defender-xdr-some-admins-may-experience-a-gap-in-security-telemetry-data-and-alerts-in-microsoft-defender-for-endpoint-and-identity","title":{"rendered":"[serviceRestored] DZ1316705 | Microsoft Defender XDR | Some admins may experience a gap in security telemetry data and alerts in Microsoft Defender for Endpoint and Identity"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">DZ1316705 | Microsoft Defender XDR | Some admins may experience a gap in security telemetry data and alerts in Microsoft Defender for Endpoint and Identity<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Status<\/th>\n<td class=\"bad\">serviceRestored<\/td>\n<\/tr>\n<tr>\n<th>Classification<\/th>\n<td>advisory<\/td>\n<\/tr>\n<tr>\n<th>User Impact<\/th>\n<td>Admins may experience a gap in security telemetry data and alerts in Microsoft Defender for Endpoint and Identity.<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>05\/21\/2026 13:53:06<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>05\/20\/2026 07:30:00<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>05\/21\/2026 11:30:00<\/td>\n<\/tr>\n<tr>\n<th>Latest Message<\/th>\n<td>Title: Some admins may have experienced a gap in security telemetry data and alerts in Microsoft Defender for Endpoint and Identity  <\/p>\n<p>  User impact: Admins may have experienced a gap in security telemetry data and alerts in Microsoft Defender for Endpoint and Identity.  <\/p>\n<p>  More info: Impacted admins may have experienced a point-in-time gap of approximately 30 minutes in security telemetry data for Microsoft Defender for Endpoint and Microsoft Defender for Identity (V3 clients) when viewing information in the Microsoft Defender   portal and Microsoft Sentinel, as the affected data wasn\u2019t ingested. <\/p>\n<p>  Final status: We&#8217;ve successfully backfilled the gap in telemetry data from the impact window and can confirm that impact is remediated.  <\/p>\n<p>  Scope of impact: Some admins relying on security telemetry reporting in Microsoft Defender for Endpoint and Microsoft Defender for Identity (V3 clients) may have been impacted.  <\/p>\n<p>  Start time: Wednesday, May 20, 2026, at 7:30 AM UTC <\/p>\n<p>  End time: Thursday, May 21, 2026, at 11:30 AM UTC <\/p>\n<p>  Root cause: An authentication component misconfiguration was causing authentication issues within a core part of the Microsoft Defender for Endpoint and Microsoft Defender for Identity services, resulting in telemetry data for a 30-minute window not being ingested.  <\/p>\n<p>  Next steps: We&#8217;re reviewing our configuration change procedures to help prevent this problem from happening again.  <\/p>\n<p>  This is the final update for the event.<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\u30bf\u30a4\u30c8\u30eb:\u4e00\u90e8\u306e\u7ba1\u7406\u8005\u306f\u3001Microsoft Defender for Endpoint and Identity\u306b\u304a\u3051\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c6\u30ec\u30e1\u30c8\u30ea\u30c7\u30fc\u30bf\u3084\u30a2\u30e9\u30fc\u30c8\u306e\u4e0d\u8db3\u3092\u7d4c\u9a13\u3057\u305f\u3053\u3068\u304c\u3042\u308a\u307e\u3059  <\/p>\n<p>  \u30e6\u30fc\u30b6\u30fc\u3078\u306e\u5f71\u97ff:\u7ba1\u7406\u8005\u306fMicrosoft Defender for Endpoint and Identity\u306b\u304a\u3051\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c6\u30ec\u30e1\u30c8\u30ea\u30c7\u30fc\u30bf\u3084\u30a2\u30e9\u30fc\u30c8\u306e\u4e0d\u8db3\u3092\u7d4c\u9a13\u3057\u305f\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002  <\/p>\n<p>  \u8a73\u7d30\u60c5\u5831:\u5f71\u97ff\u3092\u53d7\u3051\u305f\u7ba1\u7406\u8005\u306f\u3001Microsoft Defender for Endpoint\u304a\u3088\u3073Microsoft Defender for Identity(V3\u30af\u30e9\u30a4\u30a2\u30f3\u30c8)\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c6\u30ec\u30e1\u30c8\u30ea\u30fc\u30c7\u30fc\u30bf\u306b\u7d0430\u5206\u306e\u7a7a\u767d\u671f\u9593\u304c\u3042\u3063\u305f\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u306f\u3001\u5f71\u97ff\u3092\u53d7\u3051\u305f\u30c7\u30fc\u30bf\u304c\u53d6\u308a\u8fbc\u307e\u308c\u3066\u3044\u306a\u304b\u3063\u305f\u305f\u3081\u3067\u3059\u3002  <\/p>\n<p>  \u6700\u7d42\u72b6\u6cc1:\u885d\u7a81\u30a6\u30a3\u30f3\u30c9\u30a6\u304b\u3089\u306e\u30c6\u30ec\u30e1\u30c8\u30ea\u30c7\u30fc\u30bf\u306e\u7a7a\u767d\u3092\u7121\u4e8b\u306b\u88dc\u5145\u3057\u3001\u885d\u7a81\u306f\u4fee\u5fa9\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002 <\/p>\n<p>  \u5f71\u97ff\u7bc4\u56f2:Microsoft Defender for Endpoint\u304a\u3088\u3073Microsoft Defender for Identity(V3\u30af\u30e9\u30a4\u30a2\u30f3\u30c8)\u3067\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c6\u30ec\u30e1\u30c8\u30ea\u30ec\u30dd\u30fc\u30c8\u306b\u4f9d\u5b58\u3057\u3066\u3044\u305f\u4e00\u90e8\u306e\u7ba1\u7406\u8005\u304c\u5f71\u97ff\u3092\u53d7\u3051\u305f\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002  <\/p>\n<p>  \u958b\u59cb\u6642\u9593:2026\u5e745\u670820\u65e5\u6c34\u66dc\u65e5 \u5348\u524d7\u664230\u5206 UTC <\/p>\n<p>  \u7d42\u4e86\u6642\u523b:2026\u5e745\u670821\u65e5\u6728\u66dc\u65e5 \u5348\u524d11\u664230\u5206 UTC <\/p>\n<p>  \u6839\u672c\u539f\u56e0:\u8a8d\u8a3c\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306e\u8a2d\u5b9a\u30df\u30b9\u304c\u3001Microsoft Defender for Endpoint\u304a\u3088\u3073Microsoft Defender for Identity\u30b5\u30fc\u30d3\u30b9\u306e\u30b3\u30a2\u90e8\u5206\u3067\u8a8d\u8a3c\u306e\u554f\u984c\u3092\u5f15\u304d\u8d77\u3053\u3057\u300130\u5206\u9593\u306e\u30c6\u30ec\u30e1\u30c8\u30ea\u30c7\u30fc\u30bf\u304c\u53d6\u308a\u8fbc\u307e\u308c\u307e\u305b\u3093\u3067\u3057\u305f\u3002  <\/p>\n<p>  \u6b21\u306e\u30b9\u30c6\u30c3\u30d7:\u3053\u306e\u554f\u984c\u304c\u518d\u767a\u3057\u306a\u3044\u3088\u3046\u306b\u3001\u8a2d\u5b9a\u5909\u66f4\u624b\u9806\u3092\u898b\u76f4\u3057\u3066\u3044\u307e\u3059\u3002 <\/p>\n<p>  \u3053\u308c\u304c\u30a4\u30d9\u30f3\u30c8\u306e\u6700\u7d42\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>DZ1316705 | Microsoft Defender XDR | Some admins may experience a gap in security telemetry data and alerts in [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-16442","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/16442","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=16442"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/16442\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=16442"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=16442"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=16442"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}