What does log insert lag time measure?

Log insert lag time specifically measures the interval between the reception of logs and their subsequent indexing within the FortiAnalyzer system. This measurement is crucial for understanding how quickly logs are being processed after they are received.

When logs are generated by various devices, they are sent to the FortiAnalyzer for analysis and reporting. Once the logs arrive, there is a certain amount of time before they are fully indexed and made available for querying or reporting. This lag can vary based on system load, processing capabilities, and the volume of logs being received.

By monitoring log insert lag time, administrators can identify delays in log processing, which can impact the timeliness of security analysis and operational insights drawn from those logs. This real-time capability is essential for maintaining effective monitoring and response mechanisms, particularly in security-sensitive environments.

In contrast to the other options, which refer to different aspects of log handling or system performance, the measurement of log insert lag time specifically focuses on the efficiency of log processing from reception to indexing.