Notifications
Clear all
Topic starter
16/07/2026 4:10 pm
I've been monitoring our Elastic Endpoint deployment for three months. We're at around 50,000 endpoints now. I've noticed a consistent pattern where alert generation lags behind the actual event by 3 to 5 minutes.
Our event pipeline seems fine, and ingest rates are stable. Is this delay expected at this scale? I'm trying to understand if it's a tuning issue or a platform limitation for large deployments. Our compliance reporting needs tighter timelines.