Microsoft admits log data failure for key cloud services

Microsoft is informing customers that it failed to consistently collect log data for several critical cloud services. According to Business Insider that claims to have seen the update, a bug in Microsoft’s internal monitoring agents caused some agents to malfunction, preventing them from uploading log data to the company’s internal logging platform. However, there is no evidence suggesting that this issue led to any cyberattacks.
Logs are essential records of events within a system, such as account log-ins, which help monitor unauthorized access. Without accurate logs, companies can lose the ability to track issues and may miss potential intrusions.

In the customer notification, Microsoft says that between September 2 and September 19, "a bug in one of Microsoft's internal monitoring agents resulted in a malfunction in some of the agents when uploading log data to our internal logging platform."
"This issue did not impact the uptime of any customer-facing services or resources -- it only affected the collection of log events. Additionally, this issue is not related to any security compromise," it further explained.

Among services impacted by the bug are Microsoft Sentinel – a security information and event-management product and Microsoft Entra – an identity-management service. “Microsoft Sentinel customers may have experienced potential gaps in security related logs or events, possibly affecting customers' ability to analyze data, detect threats, or generate security alerts," the update says.