Hello,
I'm having a hard time understanding why I'm receiving the values that I am for _time and _indextime.
All events that I'm currently getting show a _time value that is behind that of my _indextime. From what I understand, if there was a slowdown in the indexing, these values would be the other way around. I'm also noticing that the timestamps of my events (raw data) matches that of the _timeindex which further confuses me.
Any help you could provide would be appreciated. Example below:
_time = 2018-11-15T21:06:23.000-05:00
_indextime = 11/16/2018 16:42:27
event timestamp = 2018-11-16T02:06:23.000-00:00
... View more