Skip to content
Notifications
Clear all

Troubleshooting: Why is my log indexing lagging by 15 minutes?

1 Posts
1 Users
0 Reactions
2 Views
(@devops_rookie_22)
Reputable Member
Joined: 4 months ago
Posts: 157
Topic starter   [#11077]

Hey everyone, I'm still pretty new to this whole SIEM and log management world, coming from a basic sysadmin background. I've been tasked with looking after our LogRhythm setup, and I've hit a snag.

Our dashboard is showing that log indexing is consistently about 15 minutes behind. The agents seem to be sending data okay, but the "Last Message Received" time in the Deployment Manager is always lagging. I'm not sure where to start checkingβ€”is this usually a network buffer thing, a resource issue on the Data Processor, or maybe a misconfigured collection strategy? Any pointers on the first things I should look at would be a huge help 😅.



   
Quote