Time delay for messages in Sentinel

%3CLINGO-SUB%20id%3D%22lingo-sub-1817516%22%20slang%3D%22de-DE%22%3ETime%20delay%20for%20messages%20in%20Sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1817516%22%20slang%3D%22de-DE%22%3E%3CP%3EWe%20have%20set%20up%20the%20connector%20to%20MDATP.%3CBR%20%2F%3EMessages%20that%20are%20displayed%20there%20take%20a%20long%20time%20until%20the%20info%20is%20displayed%20in%20Sentinel.%3CBR%20%2F%3EHow%20do%20we%20get%20the%20information%20displayed%20in%20Sentinel%20in%20real%20time%3F%3CBR%20%2F%3ESuch%20a%20long%20delay%20is%20not%20very%20nice%20from%20a%20security%20point%20of%20view.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%222020-10-26_08h57_49.png%22%20style%3D%22width%3A%20908px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F229203i6BFC0740962FC4CA%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%222020-10-26_08h57_49.png%22%20alt%3D%222020-10-26_08h57_49.png%22%20%2F%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%222020-10-26_09h25_44.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F229204i3F1552FD5F8E5FD2%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%222020-10-26_09h25_44.png%22%20alt%3D%222020-10-26_09h25_44.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1831559%22%20slang%3D%22de-DE%22%3ERE%3A%20Time%20delay%20for%20messages%20in%20Sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1831559%22%20slang%3D%22de-DE%22%3ECan%20no%20one%20really%20say%20why%20the%20ad%20arrives%20so%20late%20in%20the%20Sentinel%3F%3C%2FLINGO-BODY%3E
Occasional Contributor

We have set up the connector to MDATP.
Messages that are displayed there take a long time until the info is displayed in Sentinel.
How do we get the information displayed in Sentinel in real time?
Such a long delay is not very nice from a security point of view.

 

2020-10-26_08h57_49.png2020-10-26_09h25_44.png

3 Replies
Kann denn wirklich niemand sagen warum die Anzeige so sehr verzögert im Sentinel ankommt?

@Jan_F1801 I share your concern. If the delays are too large, we're better off using email alerts straight from the log source (WDATP, MCAS, ASC ...). 
Don't know if 'the silent majority' feels this is a problem too or if we are the only two :)

I have the same delay... Unfortunately this is nothing you can do