Audit Log Query status is running for more than 3 days

Question

Our service use Graph Beta API to create purview audit log query. For such query normally it only takes 15 minutes to "succeed" status.

4 days ago, in order to test the edge case, we created around 10 audit log queries, then we got 429 throttling error so we stop creating new query.

However, now all those queries are still in "running" status. Why is this happening? What is the solution? Is there any way to cancel these queries?

Answer 1

Hi G, Y,

Thanks for reaching out to Microsoft!

When throttling occurs, you'll receive an HTTP status code 429 (Too Many Requests). This response includes a Retry-After header indicating how long you should wait before retrying the request. Throttling can cause delays in processing your queries, as the service needs time to handle the backlog of requests.

Note: APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote. If you have any further questions about this answer, please click Comment.