Are there dashboards/queries anyone has run to measure the average or median time between ingestion and normalization on a per log type basis?
Are there dashboards/queries anyone has run to measure the average or median time between ingestion and normalization on a per log type basis?
I haven't seen this yet calculated. As far as I know, we don't have the normalization time stamp but it should be almost the same as the ingested timestamp. We have the event time and the ingested time and we are calculating the delta between the 2 as part of the native dashboards.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.