[INC-1136] Service Degradation Affecting SIEM Log Ingestion
View the provider incident record →Current answer
Imperva experienced a minor incident: [INC-1136] Service Degradation Affecting SIEM Log Ingestion. ServiceAlert observed recovery on Sep 18, 2026.
Provider-reported start: . Notice published: .
Looking for an update now? Check the current status, or follow Imperva for future changes.
Incident Lifecycle
Affected Components
SIEM Logs
Incident Timeline
Monitoring
Our teams have successfully implemented mitigation measures to address the issue causing some customers to receive SIEM logs from IP addresses that are no longer expected to be in use. The observed impact has been mitigated, and services are operating as expected at this time.
We are continuing to closely monitor the environment to ensure ongoing stability and confirm the effectiveness of the mitigation.
The next update on the issue will be shared no later than 01:30 UTC.
We are continuing to closely monitor the environment to ensure ongoing stability and confirm the effectiveness of the mitigation.
The next update on the issue will be shared no later than 01:30 UTC.
Sep 18, 2026 at 12:59 AM UTC
Identified
Our teams continue to work on implementing mitigation measures to address the issue causing some customers to receive SIEM logs from IP addresses that are no longer expected to be in use.
Efforts remain focused on reducing customer impact and restoring expected behavior. We will provide additional updates as progress is made.
The next update on the issue will be shared no later than 01:00 UTC.
Efforts remain focused on reducing customer impact and restoring expected behavior. We will provide additional updates as progress is made.
The next update on the issue will be shared no later than 01:00 UTC.
Sep 18, 2026 at 12:25 AM UTC
Investigating
We have identified the source of the issue affecting a subset of customers, resulting in SIEM logs being received from IP addresses that are no longer expected to be in use.
Our teams are actively implementing mitigation measures to reduce customer impact and restore expected behavior. We will provide further updates as they become available.
The next update on the issue will be shared no later than 00:30 UTC.
Our teams are actively implementing mitigation measures to reduce customer impact and restore expected behavior. We will provide further updates as they become available.
The next update on the issue will be shared no later than 00:30 UTC.
Sep 17, 2026 at 11:52 PM UTC
Investigating
We are investigating an issue where some customers may receive SIEM logs from IP addresses that are no longer expected to be in use.
Our teams are actively investigating the issue and working to identify the cause.
We will provide further updates as more information becomes available.
Our teams are actively investigating the issue and working to identify the cause.
We will provide further updates as more information becomes available.
Sep 17, 2026 at 11:11 PM UTC
Was your business affected by this Imperva outage?
Follow Imperva and route available status alerts to email or a team channel.