topic Re: Latency issue in Getting Data In

While searching DHCP logs there are huge latency (indextime -time) for few events

pavanbmishra — Thu, 03 Mar 2022 17:28:56 GMT

Hi SMEs, i have quick query here. While searching DHCP logs i could see huge latency (indextime -time) for few events , rest all looks ok. sharing two consecutive event logs with minimal and max latency reported. Any clue. Event collection is through UF here

Re: Latency issue

ITWhisperer — Thu, 03 Mar 2022 07:52:07 GMT

Could it be that one entry has a timestamp in local time (UTC-05:00 approx.) whereas the other is in 0 time?

Re: Latency issue

pavanbmishra — Thu, 03 Mar 2022 08:20:02 GMT

Ok, and how that could be checked/confirmed? however these both logs from same host here.

Re: Latency issue

ITWhisperer — Thu, 03 Mar 2022 08:25:59 GMT

One entry says date_zone 0 and the other says date_zone local - where do these come from? Presumably, this is something from the DHCP server itself. Do you have any documentation on the DHCP server logging process?

Alternatively, can you use this field to adjust your calculation of what the "latency" might be?