Hello DLP community,
I have a nDLP Monitor Appliance (looking to span port and capturing SMTP traffic) and DLP Manager(virtual) configured together. All things are working fine except one strange behaviour: when searching for SMTP events from manager I don't see fresh events, but sometimes events arrived more that 10 minutes ago or event 30 minutes ago. It looks like DLP Monitor flushes events only ~every 30 minutes. Is there some interval that could be tuned when DLP monitor flushes captured events?