What does log lag time indicate in Fortianalyzer?

Log lag time in FortiAnalyzer refers to the time taken to process logs. This metric is crucial for understanding how efficiently log data is being handled within the system. When logs are generated by Fortinet devices, they are collected by FortiAnalyzer for analysis and reporting. Log lag time helps to determine the delay between when logs are received and when they are fully processed and available for querying or reporting.

This metric provides insights into the performance of the log processing mechanism and can indicate potential bottlenecks. If log lag time is high, it may suggest that the infrastructure is struggling to keep up with the volume of incoming log data, which could affect real-time monitoring and analysis capabilities. Monitoring log lag time is important for maintaining optimal performance in security management tasks and ensuring timely responses to security incidents.