locked
Event Delivery Optimization RRS feed

  • Question

  • When forwarding events to ATA-Gateway Event Delivery Optimization can be "Normal", "Minimize Bandwidth" and "Minimize Latency" - Normal is the default option. Using "Normal" Events will be forwarded every 15 minutes. Is this sufficient for Advanced Threat Analytics ? Would "Minimize Latency" be a better choice ?
    Thursday, October 19, 2017 2:03 PM

Answers

  • Generally, if the info comes faster, we can alert faster (up to a point...)
    Thursday, October 19, 2017 8:19 PM

All replies

  • Generally, if the info comes faster, we can alert faster (up to a point...)
    Thursday, October 19, 2017 8:19 PM
  • OK, thanks - this was my assumption as well.

    Might be worth to consider to add this information to documentation at https://docs.microsoft.com/de-de/advanced-threat-analytics/configure-event-Collection

    Friday, October 20, 2017 6:28 AM