Azure / Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.
https://azure.microsoft.com/en-us/services/azure-sentinel/
MIT License
4.56k stars 3k forks source link

Proofpoint On demand(POD) Timer too long #11243

Open dreamerfuzzy opened 1 week ago

dreamerfuzzy commented 1 week ago

Describe the bug In Solutions/Proofpoint On demand(POD) Email Security, the function is now pulling logs every 1 hour, many times the information received is too much and ends with a timeout.

To Reproduce Steps to reproduce the behavior:

  1. Deploy the function.
  2. Wait till the function is executed.
  3. If the information received is big, will crash.

Expected behavior If the pulling time is reduced, then this problem will be avoided.

Additional context Suggested time: 10 minutes.

v-sudkharat commented 1 week ago

Hi @dreamerfuzzy, Thanks for flagging this issue, we will investigate this issue and get back to you with some updates.Thanks!

v-sudkharat commented 1 day ago

Hi @dreamerfuzzy, WEBSITE_RUN_FROM_PACKAGE - https://github.com/Azure/Azure-Sentinel/raw/c32f4c8347e79ed128f76aa76ff099d133997114/Solutions/Proofpoint%20On%20demand(POD)%20Email%20Security/Data%20Connectors/ProofpointSentinelConn.zip

Update the above shared link in function app WEBSITE_RUN_FROM_PACKAGE: Image

Once it updated, save the changes are restart the function app. Please let us know if your issue resolved.

Thanks!