0365 splunk addon data comes after delay of 1 day?

[lmjoin]

Hello ,

we are getting "0365 splunk addon data comes after delay of 1 day "

1. Which version of Splunk are you currently using?

Answer 8.2

1. Which app/add-on are you using to send the O365 data?

Answer:-  Microsoft Graph Security Add-on for SplunkTA-microsoft-graph-security-add-on-for-splunk1.2.1

Thanks

Lalit 

[Splunkin]

Hi, we also experience this issue, where we observed the initial mail received by user will be display next 24 hours after user received. Need help if there any mitigation for almost real time also can be good.