Data Feed API Errors and Incomplete results

After 19 hours and 38 minutes

The previous reported concern with Data Feed API has been resolved. The service is fully restored and there is no longer an impact to customers. This incident is resolved.

After 1 hour and 24 minutes

We have implemented a workaround that has remediated the underlying cause of this incident. Customers should no longer experience errors. Any customers seeing incomplete results are requested to reconfigure their Splunk application to a previous date. Note that this action will result in data duplication.

We continue to closely monitor connectivity and functionality of Data Feed API. We will provide another update as additional information becomes available.

After 38 minutes

The issue has been identified and a fix is being implemented.


We are aware of customers receiving error messages or incomplete results when querying the Data Feed API service.

We have engaged all appropriate resources and are working towards a resolution. Note that there is no impact to protection services, and all other aspects of our services remain functional. Any historic data will be available once the incident is resolved. We will provide further updates as new information becomes available.

Began at:

Affected components