FRA1 storage cluster is unstable

Update timeline

1. investigating Feb 10, 2026, 04:02 AM UTC

   We are investigating an ongoing incident on the storage cluster having a major impact.

2. identified Feb 10, 2026, 04:04 AM UTC

   The event storage cluster is partially down and most data are unavailable. The team is trying to stabilize the cluster state. No data is lost but data availability will recover progressively in the next hours.

3. identified Feb 10, 2026, 05:34 AM UTC

   The event storage cluster is partially down and most data are still unavailable. The team is currently trying to reload all data. No data is lost but data availability will recover progressively in the next hours. There is also a huge delay on event processing.

4. identified Feb 10, 2026, 06:37 AM UTC

   The event storage cluster is partially down and most data are still unavailable. The team is still trying to reload all data. No data is lost but data availability will recover progressively in the next hours. There is also a huge delay on event processing.

5. identified Feb 10, 2026, 07:34 AM UTC

   The event storage cluster is partially down and most data are still unavailable. The team is still trying to reload all data. No data is lost but data availability will recover progressively in the next hours. There is also a huge delay on event processing.

6. identified Feb 10, 2026, 09:39 AM UTC

   Update - Our engineering teams have identified the source of the recent instability and are actively progressing through the restoration process. We would like to emphasize upfront that all data remains fully intact and secure. - Data Preservation: All data is preserved and its integrity is guaranteed. - Progressive Recovery: Data reloading is underway, and access will be progressively restored over the coming hours. - Additional mitigation works: in parallel of the data reloading, additional technical solutions are under evaluation to further accelerate recovery - Event Processing: Temporary delays in event processing may be observed while the system returns to its optimal state. Our priority is to restore the cluster to full operational capacity, and we are working diligently to finalize these steps. We appreciate your continued patience and will provide the next update before 12.00 CET.

7. identified Feb 10, 2026, 11:13 AM UTC

   Our engineering team is making steady progress with the restoration. Our efforts have continued and are focused on the following actions - Alert Data Recovery: restoring events linked to alerts to ensure customers can resume immediate investigations. - Search Functionality: re-enable general event searching outside of the alert scope. - Cluster Restoration: full background restoration of the Storage facility for all historical events. Our full technical team is committed to restore the cluster to full operational capacity, and we are working diligently to advance these steps. We appreciate your continued patience and will provide the next update before 14.00 CET.

8. identified Feb 10, 2026, 12:21 PM UTC

   Our engineering team continues to make steady progress restoring the storage facility. What’s working again - You can search events again, - Events linked to older alerts are fully available, so you can investigate historical alert activity as usual. What may still be delayed - Events linked to newer alerts may still appear with some delay. These delays are decreasing and are expected to be fully resolved within the next 2 hours. What’s still impacted - Some functionality remains inconsistent, including SOL queries. Our full technical team remains engaged and is working to restore full operational capacity as quickly as possible. Thank you for your patience, we’ll share the next update before 15:00 CET.

9. identified Feb 10, 2026, 12:22 PM UTC

   We are continuing to work on a fix for this issue.

10. identified Feb 10, 2026, 02:24 PM UTC

    Customers can now investigate their alerts with the associated events in real time. What’s working - Events linked to alerts are fully available, so you can investigate all alert activity as usual. - Global event search is restored, except for search combining eternal and non-eternal events What is still impacted - Some functionalities remain inconsistent, including SOL queries. Our technical team remains fully committed and is working to restore full operational capacity as quickly as possible. Thank you for your patience and understanding. The next update will be shared before 17:00 CET.

11. identified Feb 10, 2026, 03:47 PM UTC

    Our engineering team continues to make steady progress restoring the storage facility. What’s working - Events linked to alerts are fully available, customers can investigate all alert activity as usual. - Global event search is restored, except for search combining eternal and non-eternal events What is still impacted - Some functionalities remain inconsistent, including SOL queries, correlation and anomaly-based alerts. Our technical team remains fully committed and is working to restore full operational capacity as quickly as possible. Thank you for your patience and understanding. The next update will be shared before 18:30 CET.

12. identified Feb 10, 2026, 06:11 PM UTC

    Update - Our engineering team is continuing to work diligently on the full restoration of the storage facility. We are making steady progress, and the platform status remains consistent with our previous update: What’s working - Alert Investigation: Events linked to alerts are fully available. - Event Search: Global event search is available (excluding searches combining eternal and non-eternal events). What is still being restored - Advanced Functionalities: SOL queries, correlation, and anomaly-based alerts remain inconsistent. Our team remains fully mobilized to resolve these remaining items as quickly as possible. Thank you for your continued patience. The next update will be shared before 21:00 CET.

13. identified Feb 10, 2026, 07:48 PM UTC

    Update - Our engineering team is continuing to work diligently on the full restoration of the storage facility. We are making steady progress, and the platform status remains consistent with our previous update: What’s working - Alert Investigation: Events linked to alerts are fully available. - Event Search: Global event search is available (excluding searches combining eternal and non-eternal events). What is still being restored - Advanced Functionalities: SOL queries, correlation, and anomaly-based alerts remain inconsistent. Our team remains fully mobilized to resolve these remaining items as quickly as possible. Thank you for your continued patience.

14. monitoring Feb 11, 2026, 12:09 AM UTC

    Our engineering team is continuing to work diligently on the full restoration of the storage facility. We are now fully in control of the storage platform and are progressively re-enabling its core features. We’ve also entered the last phase of the incident: the lag processing phase to catch up on pending/backlogged processing. What’s working - Alert Investigation: Events linked to alerts are fully available. - Event Search: Global event search is available (excluding searches combining eternal and non-eternal events). What is still being restored - Advanced functionalities: SOL queries, correlation, and anomaly-based alerts may be inconsistent until the backlog is fully processed. Our team remains fully mobilized and committed to resolving the remaining items as quickly as possible. Thank you for your continued patience.

15. monitoring Feb 11, 2026, 09:22 AM UTC

    Our engineering team is continuing to work diligently on the full restoration of the storage facility. We are now fully in control of the storage platform and are progressively re-enabling its core features. The lag processing phase continues to catch up on pending/backlogged processing. We are making steady progress, and the platform status remains consistent with our previous update: What’s working - Alert Investigation: Events linked to alerts are fully available. - Event Search: Global event search is available (excluding searches combining eternal and non-eternal events). What is still being restored - Advanced functionalities: SOL queries, correlation, and anomaly-based alerts may be inconsistent. Our team remains fully mobilized and committed to resolving the remaining items as quickly as possible. Thank you for your continued patience. The next update will be shared before 14:00 CET

16. monitoring Feb 11, 2026, 03:22 PM UTC

    Our engineering team is continuing to work diligently on the full restoration of the storage facility. The lag processing phase continues to catch up on pending/backlogged processing. We are making steady progress, and the platform status remains consistent with our previous update: What’s working Alert Investigation: Events linked to alerts are fully available. Event Search: Global event search is available (excluding searches combining eternal and non-eternal events). What is still being restored Advanced functionalities: SOL queries, correlation, and anomaly-based alerts may be inconsistent. Our team remains fully mobilized and committed to resolving the remaining items as quickly as possible. Thank you for your continued patience. The next update will be shared before 19:00 CET

17. monitoring Feb 11, 2026, 08:53 PM UTC

    Our engineering team is continuing to work diligently on the full restoration of the storage facility. Correlation detection capabilities have been restored. Related alerts will continue raise as the lag is being resolved. The lag processing phase continues to catch up on backlogged processing. What’s working - Alert Investigation: Events linked to alerts are fully available. - Event Search: Global event search is available (excluding searches combining eternal and non-eternal events). What is still being restored - Advanced functionalities: SOL queries, and anomaly-based alerts may be inconsistent. Our team remains fully mobilized and committed to resolving the remaining items as quickly as possible. Thank you for your continued patience.

18. monitoring Feb 12, 2026, 08:54 AM UTC

    All features are now operational and the service is live, including SOL and anomaly detection. We are continuing to process a backlog of older events generated during the incident window. Some specific functionalities remain impacted until processing of the backlog, including - Event Search: searches combining eternal and non-eternal events - SOL requests for events between 10/02 13:00 UTC - 11/02 11:00 UTC Thank you for your patience throughout this incident.

19. monitoring Feb 12, 2026, 05:39 PM UTC

    All features are now operational and the service is live. We are continuing to process a backlog of older events generated during the incident window. Some specific functionalities remain impacted until processing of the backlog, including - SOL requests for events between 10/02 13:00 UTC - 11/02 11:00 UTC Thank you for your patience throughout this incident.

20. resolved Feb 13, 2026, 03:04 PM UTC

    The storage issue impacting our FRA1 region have been fully resolved. All functionalities have been restored. All queued data and events have now been successfully processed. We thank you for your patience throughout this incident.