Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What does ingestion time mean in CloudWatch

In the structure of an event of Cloudwatch :

'events': [
        {
            'logStreamName': 'string',
            'timestamp': 123,
            'message': 'string',
            'ingestionTime': 123,
            'eventId': 'string'
        },
    ]

What does ingestionTime mean ?

In this doc they are saying :

ingestionTime

The time the event was ingested.

Which I find still unclear.

like image 818
JavaQueen Avatar asked Jan 13 '17 09:01

JavaQueen


People also ask

What does ingestion time mean?

Ingestion time: Ingestion time is the time that events enter Flink. At the source operator each record gets the source's current time as a timestamp, and time-based operations (like time windows) refer to that timestamp. Ingestion time sits conceptually in between event time and processing time.

How long does it take for logs to show up in CloudWatch?

It may take 5 to 10 minutes for logs to show up after a function invocation.

What are 3 things you can do in CloudWatch?

CloudWatch ServiceLens lets you gain visibility into your applications in three main areas: infrastructure monitoring (using metrics and logs to understand the resources supporting your applications), transaction monitoring (using traces to understand dependencies between your resources), and end-user monitoring (using ...


1 Answers

There are two timestamp fields, here.

The timestamp is the time the event was said to have occurred, according to the message that was sent to CloudWatch.

The ingestionTime is the time CloudWatch actually received the message about the event.

The difference between the two -- assuming all clocks are accurate -- is the delay between when the event occurred and when CloudWatch received and "ingested" (was fed, ate, consumed) the message about the event.

like image 124
Michael - sqlbot Avatar answered Oct 15 '22 19:10

Michael - sqlbot