OpsfluenceMSP Demo
Signed in asNorthern Edge IT·Toronto, ON·22 customers managed
← Back to incident
POST-MORTEM · SHAREABLEinc-1026MLMeridian LegalHHHarbourfront HealthCCCopperfield Contractors

Exchange Online mail delays — hit all three customers

Microsoft advisory EX834552 caused inbound mail delays across all 3 Northern Edge customers. Opsfluence consolidated into one incident + auto-posted tuned comms to each customer's preferred channel.

Time to resolve
135m
People involved
1
Tools correlated
4

Impact

All 3 customers · ~710 users total · delayed but delivered

Root cause

Microsoft-side transport queue congestion in North America. Advisory EX834552. Resolved by Microsoft in 135 minutes.

Resolution

No customer-side action required. Opsfluence posted the 'delayed mail' template to each customer's preferred channel (Teams for Meridian + Harbourfront, Slack for Copperfield) within 10 minutes. Reduced Northern Edge ticket volume for this event by ~85% vs. prior similar advisories.

Action items

Tools involved

MMicrosoft 365AAzure MonitorTMicrosoft TeamsSSlack

Timeline

  1. MMicrosoft 365·MLMeridian Legal·16:50·3h ago·EX834552
    Advisory EX834552 · Exchange Online delivery delays (Meridian tenant)
    Microsoft advisory issued for Meridian tenant. External inbound mail delayed.
  2. MMicrosoft 365·HHHarbourfront Health·16:51·2h ago·EX834552
    Advisory EX834552 · same advisory hits Harbourfront tenant
    Correlator recognizes tenant-agnostic advisory and de-dupes across customers.
  3. MMicrosoft 365·CCCopperfield Contractors·16:51·2h ago·EX834552
    Advisory EX834552 · also affects Copperfield
    Third tenant hit — Opsfluence consolidates into one incident record rather than three pages.
  4. AAzure Monitor·HHHarbourfront Health·16:55·2h ago·kql.alert.hopCount
    Log Analytics · SMTP hop count anomaly (+340%)
    Hop counts on inbound mail routed via EXO transport 3.4x baseline for Harbourfront. Confirms customer-side impact.
  5. TMicrosoft Teams·MLMeridian Legal·17:00·2h ago·chatMessage.send
    Teams post to Meridian #it-status
    Adaptive card posted with advisory summary + end-user message template. Auto-tuned for a law firm audience.
  6. TMicrosoft Teams·HHHarbourfront Health·17:00·2h ago·chatMessage.send
    Teams post to Harbourfront #it-status
    Same advisory, comms tuned for clinic staff — 'external emails from insurers may be delayed'.
  7. SSlack·CCCopperfield Contractors·17:01·2h ago·chat.postMessage
    Slack post to Copperfield #general
    Copperfield uses Slack for comms — Opsfluence posted the trades-tuned version there instead of Teams.
  8. MMicrosoft 365·MLMeridian Legal·19:05·45m ago·EX834552.resolved
    Advisory EX834552 · Restored
    Microsoft marked the advisory fully mitigated across all three tenants. Queues drained.