Google Cloud MINOR
Delay in normalization for Chronicle customers
May 8, 2023 · 06:17 PM UTC – 10:54 PM UTC · Duration: 4h 37min
Affected Services
Chronicle Security
Timeline
10:54 PM
The issue with Chronicle has been resolved for all affected users as of Monday, 2023-05-08 14:53 US/Pacific.
We thank you for your patience while we worked on resolving the issue.
08:14 PM
Summary: Delay in normalization for Chronicle customers
Description: Our engineering team is currently working on mitigation of the issue.
We will provide an update by Monday, 2023-05-08 15:00 US/Pacific with current details.
We apologize to all who are affected by the disruption.
Diagnosis: Customers are unable to see the latest ingested logs on the Chronicle UI. Logs will be visible only after normalization and there is a current delay of approximately 3 hours for normalization.
Rules run on normalized events to detect threats and these are also delayed. Customers will not be seeing latest alerts on their page.
Workaround: None at this time.
06:45 PM
Summary: Delay in normalization for Chronicle customers
Description: We are experiencing an issue with Chronicle Security beginning at Monday, 2023-05-08 07:30 US/Pacific.
Our engineering team continues to investigate the issue.
We will provide an update by Monday, 2023-05-08 12:00 US/Pacific with current details.
We apologize to all who are affected by the disruption.
Diagnosis: Customers are unable to see the latest ingested logs on the Chronicle UI. Logs will be visible only after normalization and there is a current delay of approximately 3 hours for normalization.
Rules run on normalized events to detect threats and these are also delayed. Customers will not be seeing latest alerts on their page.
Workaround: None at this time.