missing data - SPO/TEAMS

[funzel1]

Describe the bug No data for SPO since two months on two tenants, delay with Teams data

To Reproduce Steps to reproduce the behavior:

1. Go to your Analytics workspace
2. run query O365API_CL |summarize by Workload_s

Output:

Workload_s Aip CRM SecurityComplianceCenter MicrosoftForms PowerApps PublicEndpoint

---

data for SPO (last event 2 months old), for Teams last event 24 hours old Expected behavior last event for SPO and teams should have 30 min age as output with running query

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[funzel1]

Maybe related to Purview rollout ?

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[v-rucdu]

@funzel1 : This seems to be a very old problem, and this connector may have already had numerous updates, can you please check and confirm if your problem has been solved? Thanks!!

[funzel1]

Hello @v-rucdu how check the version ? What we got in parallel, we run into a limitation the count of operations is more as 500, so we have splitted api in services bases packages like one for Microsoft Forms only.

[v-rbajaj]

Hi @funzel1, are you still facing this issue?

[v-rbajaj]

We wanted to check on the status of Issue https://github.com/Azure/Azure-Sentinel/issues/6569. The issue is pending for more than the expected days. Please let us know if you need any assistance to review this Issue. As per our standard operating procedures if no response is received in the next 7 business days, we will close this Issue. Thank you for your cooperation.

[v-vdixit]

Hi @funzel1 since we have not received a response in the last 7 days, we are closing your issue as per our standard operating procedures. If you still need support for this issue, feel free to re-open at any time. Thank you for your co-operation.

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.