Do you know the root cause of the delay?
Do you know if the logs are collected slowly or processed slowly by the AV server?
Are you under the impression that it's operating as intended?
Thanks for the response, Andy.
From what I can tell and the response we get from Symantec, the logs just take some time to process by the AV server. Otherwise, it appears to be operating as expected.
I'll dig some examples out and post them here for review.
Is this via the SQL parser or ASP? Thanks.