Hi
I have an issue i have an alert is running which invokes the custom script when it fires , but i have a 3 min delay , when i saw logs i find out the logs are ingesting on right time no delay in log ingestion , when the alert is running its showing right time but when it invoking the custom script their is a delay of 3 min ? any one can please help me ?
Make sure that ALL of your servers are using NTP
. I assume that the problem is clock drift.
No its not real time , Thanks i will check if it uses NTP or not ?
Thanks
You are not running a real-time search for this, are you?