SIEM: Search performance degradation

Update timeline

1. investigating Apr 01, 2026, 03:30 PM UTC

   We are currently investigating degraded search performance affecting SIEM search in portal. A subset of users may experience slow or delayed results when performing searches within the SIEM. Log ingestion and alerting are operating normally and are not impacted. Our engineering team is actively investigating the root cause.

2. identified Apr 01, 2026, 03:42 PM UTC

   The issue has been identified and a fix is being implemented.

3. monitoring Apr 01, 2026, 08:36 PM UTC

   We have identified the root cause of degraded search performance, a subset of users may continue to experience minor search delays while these processes complete. Log ingestion, alerting, and all other SIEM functions remain fully operational and unaffected. No action is required on the part of affected users. We will provide a further update once the environment has fully stabilized.

4. monitoring Apr 02, 2026, 03:19 PM UTC

   We are continuing to monitor for any further issues.

5. resolved Apr 02, 2026, 03:19 PM UTC

   This incident has been resolved.