Skip to content
OutageDeck

Incident detail

SIEM - Delayed Investigation Creation

Resolved incidentMinor

Timeline window

to

Get alerted the next time Rapid7 breaks

Free email alerts for the handful of vendors you cannot afford to miss. No card, live in about a minute. Paid plans add Slack, Teams, Discord, and webhook delivery across your whole stack, plus higher API quotas.

Set up free alertsHow Rapid7 alerts work

Timeline

Incident updates

Every update Rapid7 posted, oldest to newest, exactly as it appeared on their official status page.

  1. Identified

    We have identified an issue that caused delays in the creation of Investigations for SIEM (InsightIDR) and Managed Detection and Response customers. A fix has been deployed.

    Investigations that should have been created between 11:25 and 13:50 UTC on May 5, 2026 may still be delayed. We are actively replaying impacted alerts and working to ensure all missing Investigations are generated as quickly as possible.

  2. Identified

    Update: For Managed Detection and Response (MDR) customers, Rapid7 Managed alerts were not impacted. However, Custom and Contextual alerts (not triaged by the Rapid7 SOC) may have experienced delays in Investigation creation during this time window.

  3. Identified

    Update: Replay of impacted alerts for the CA and AP regions has been completed.

  4. Resolved

    Update: Replay of impacted alerts for all regions has been completed.

Keep exploring

More from Rapid7

Neighboring incidents on Rapid7's timeline and the rest of their record on OutageDeck.

← Older incident

Delay in alerts and investigations in AP and EU

Newer incident →

Agent management UI intermittent issues and delays in SIEM data processing

All Rapid7 incidentsRapid7 live status