Deployment Architecture

how much is the time difference between current and and next data pull time via MS Cloud Services addon

vikram_m
Path Finder

how much is the time difference between current and and next data pull time via MS Cloud Services addon\

When I am trying to put 240 or 300 still the data is pulled in less than a minute.

is there any way I can find out

(1) what is the time log is stored i Azure storage.
(2) What is the time the log is pulled in Splunk
(3) time at which the logs are indexed in Splunk.

0 Karma

woodcock
Esteemed Legend

If you have done your timestamping right (1)=(2)= _time; (3) = _indextime

0 Karma
Get Updates on the Splunk Community!

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...