Is Whalebone down?

We are investigating delayed DNS traffic data in EU-01. Some customers may see slow-loading or missing DNS traffic data in the Admin Portal. DNS Traffic related alerting is also affected. Our team has identified a backlog in the DNS traffic data pipeline and is working on recovery. Based on current information, the impact is limited to DNS traffic visibility and related alerting.

We are continuing to recover delayed DNS traffic data in EU-01. The underlying storage cluster is healthy, and delayed traffic records are being backfilled. Some customers may still see delayed or missing DNS traffic data in the Admin Portal. DNS Traffic related alerting may also remain affected until the backlog is processed. We currently expect this to take approximately 12 hours. No customer action is required.

The issue affecting DNS traffic data visibility in EU-01 has been resolved. DNS traffic data in the Admin Portal is loading normally again, and all delayed data has been processed. We will continue monitoring, but no further customer action is required.

We are investigating a data visibility issue affecting Resolver metrics, Resolver alerts, and the Threats dashboard. Customers may currently be unable to view Resolver metrics, Resolver alerts may be delayed, and the Threats dashboard may show no data. DNS resolution and filtering remain operational. Our team is working to restore the affected data backend. We will provide another update as soon as more information is available.

We are seeing recovery of the affected data backend. Resolver metrics and Threats dashboard data are starting to become available again. Some Resolver metrics or alerts may still be delayed while data processing catches up. DNS resolution and filtering remain operational. Our team is continuing to monitor the recovery and will provide another update once service is fully restored.

The data visibility issue affecting Resolver metrics, Resolver alerts, and the Threats dashboard has been resolved. Resolver metrics are available again, delayed alert processing has recovered, and Threats dashboard data is displaying normally. DNS resolution and filtering remained operational throughout the incident. No customer action is required.

We are investigating a false positive affecting Content Filtering. Some customers may be unable to access Microsoft sign-in through login.microsoftonline.com when the Gambling category is active in Content Filtering. General DNS resolution remains operational. Protection and filtering outside this false positive are not known to be affected. Our team is investigating and working to mitigate the incorrect blocking decision. Next update: within 60 minutes.

We have identified the source of the incorrect Content Filtering categorization for login.microsoftonline.com and have pushed corrective updates. The domain should no longer be blocked on resolvers that have accepted the latest update. We are forcing regeneration of the remaining filtering data and verifying propagation. General DNS resolution remains operational. Protection and filtering outside this false positive are not known to be affected. Next update: within 60 minutes.

The false positive affecting Content Filtering for login.microsoftonline.com has been mitigated. The incorrect categorization has been removed and propagation has been verified. Latest checks confirm the domain is no longer blocked on affected resolvers. General DNS resolution remained operational throughout the incident. Protection and filtering outside this false positive were not known to be affected. We are closing this incident.

We are investigating an issue affecting the Resolvers metrics dashboard in the Admin Portal. Some customers may currently see missing metrics for the last few hours. The issue appears to be related to delayed or missing data in the resolver metrics pipeline. DNS resolution and protection remain operational; this issue affects dashboard visibility only. We will share another update as soon as more information is available.

We have identified the issue affecting the Resolvers metrics dashboard in the Admin Portal and applied mitigation. Resolver metrics are now flowing again and missing data is being backfilled. DNS resolution and protection were not affected during this incident; the impact was limited to dashboard visibility. We are monitoring the situation to confirm full recovery before resolving the incident.

The issue affecting the Resolvers metrics dashboard in the Admin Portal has been resolved. Metrics ingestion is operating normally again and missing data has been backfilled. DNS resolution and protection were not affected during this incident; the impact was limited to dashboard visibility only.