Microsoft Sentinel Blog 4 MIN READHandling ingestion delay in Azure Sentinel scheduled alert rulesromarsiaFormer EmployeeJan 12, 2021 At Azure Sentinel we take pride in the ability to ingest data from a variety of sources(learn more). However, data ingestion time may vary for different data sources under different circumstanc...Show MoreUpdated Jan 12, 2021Version 2.0
romarsiaFormer EmployeeApr 05, 2021luizao_lf you are correct about the MMA agent. The Timegenerated should represent the time the event was created. How the time generated is set depends on the source and the pipe used for ingestion
