When forwarding events to ATA-Gateway Event Delivery Optimization can be "Normal", "Minimize Bandwidth" and "Minimize Latency" - Normal is the default option. Using "Normal" Events will be forwarded every 15 minutes.
Is this sufficient for Advanced Threat Analytics ? Would "Minimize Latency" be a better choice ?
Might be worth to consider to add this information to documentation at https://docs.microsoft.com/de-de/advanced-threat-analytics/configure-event-Collection