Why is there a delay in custom alert firing?

[Prakash493]

Hi

I have an issue i have an alert is running which invokes the custom script when it fires , but i have a 3 min delay , when i saw logs i find out the logs are ingesting on right time no delay in log ingestion , when the alert is running its showing right time but when it invoking the custom script their is a delay of 3 min ? any one can please help me ?

[woodcock]

Make sure that ALL of your servers are using NTP. I assume that the problem is clock drift.

[Prakash493]

No its not real time , Thanks i will check if it uses NTP or not ?

Thanks

[woodcock]

You are not running a real-time search for this, are you?