Inquiry regarding potential 24-hour ingestion delays in Log Analytics at high throughput and related SLAs.

Question

Experiencing delays in data ingestion into Log Analytics and would like to confirm whether these delays could reach up to 24 hours depending on throughput. Additionally, I would like to know if Microsoft provides any specific Service Level Agreements related to data ingestion times for Log Analytics, especially under high-throughput scenarios.

Answer 1

Hi Teddy

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Log data ingestion into Azure Monitor usually takes between 20 seconds to 3 minutes, but this can change depending on factors like agent performance, network conditions, and the ingestion method used.

In high-throughput scenarios, delays could sometimes extend up to 24 hours, especially if there are large processing backlogs or network problems.

Agent Time: The time it takes for the agent to detect and send events.

Pipeline Time: The time spent processing log records.

Indexing Time: The time needed to store logs in Azure Monitor's data store.

Microsoft doesn't set a specific SLA for log ingestion times in Azure Log Analytics during high-throughput scenarios. Instead, they provide average latency data and note that ingestion times can be influenced by the factors mentioned earlier.

For reference, please review this documentation :-
https://learn.microsoft.com/en-us/azure/azure-monitor/logs/data-ingestion-time
https://learn.microsoft.com/en-us/azure/sentinel/ingestion-delay

If you have any further queries, do let us know.

---

If the answer is helpful, please click "Accept Answer" and "Upvote it".