Hi Team,
We are using add-on to collect the Azure metrics through REST API. Data is getting ingested into Splunk cloud. However, we are seeing a lag of exactly 4 hours. Splunk Cloud is in UTC time zone.
We have set the TZ=UTC in HF apps/ local/props.conf as application is writing in UTC time. However, there is a lag in Splunk cloud.
https://splunkbase.splunk.com/app/3110
Any help is highly appreciated.