Clarification Needed Regarding Log Ingestion

[Akhil-Jayendran]

Hello Team,

I need a few clarifications regarding log ingestion 🙂 

According to the document, Dynatrace automatically discovers, analyzes, and stores logs every 60 seconds. Does this means that every 60 seconds, the log agent checks for new entries in the already discovered logs and then sends them to the Dynatrace cluster? If so, does this imply that Dynatrace does not fetch log data in near-real time?

Additionally, this document mentions that logs ingested via OneAgent are typically ready for analysis within a few seconds to 90 seconds. Could you please clarify what exactly this means?

Regards,

Akhil Jayendran

[yanezza · Accepted solution]

Hi,

• yes - 60s should be the default task scheduling, but if you need to change it, contact our support.
• yes - there is little delay between the ingestion and when the data is available for analysis, anomaly detection ect. 
  It is usual under 30s, it is due processing and storaging time and depends by many factor, including the volume and size ingestion.