Netanelp.67066 (Customer) asked a question.
System log since query param return results that are not accurate
Hi!
When I am fetching from the system log API and using the since query parameter the response may include events that occurred up to 30ms ago.
For example lets say that the request returns only one event called A.
Next if I will send a request with 1 more millisecond the event A will still be included.
I checked and event A will not be included only if the gap is bigger than 30ms.
Is this a known issue?
Hi @Netanelp.67066 (Customer),
Thank you for posting on the Okta community page!
I have done some research and you might be seeing this behaviour because the Okta System Log API provides near real-time events where I assume that some of the events that should be logged might be delayed, this being one of the reasons why the System Log API isn't intended for use as a Database to serve data directly to downstream consumers without an intermediate data store.
In addition, I managed to find in the below documentation, the following statement "Not all events for the specified time range may be present— events may be delayed. Such delays are rare but possible" which might explain the behaviour that you are seeing.
------------------------------------------------------------------------------------------------------------------------------------------------
Join us in the Oktane discussion group to connect with attendees or just stay connected to the event.