Delay in message trace logs has been increased from 2 hours to 4 hours over time after upgrading splunk. No changes has been done.