SIEM: Search performance degradation

This incident has been resolved.

We have identified the root cause of degraded search performance, a subset of users may continue to experience minor search delays while these processes complete. Log ingestion, alerting, and all other SIEM functions remain fully operational and unaffected. No action is required on the part of affected users. We will provide a further update once the environment has fully stabilized.

The issue has been identified and a fix is being implemented.

We are currently investigating degraded search performance affecting SIEM search in portal. A subset of users may experience slow or delayed results when performing searches within the SIEM. Log ingestion and alerting are operating normally and are not impacted. Our engineering team is actively investigating the root cause.