Log Visibility Delay¶
Manage > Workspace Management > Advanced Settings supports setting a unified visibility delay window for log queries. When enabled, the system automatically applies a unified visibility restriction to log queries. New logs within the window period are not available for user queries, only log data before the delay window can be queried. This feature only affects query visibility and does not affect log ingestion, monitor detection, or alert processing.
When the feature is turned off, log query behavior remains as is.
Feature Availability Prerequisite
The TrueWatch Free Plan does not support this feature.
Configuration¶
- Go to Manage > Workspace Management > Advanced Settings.
- Find the Log Visibility Delay module and click Configure.
- Turn on the Enable Log Visibility Delay switch.
- Select the window duration from the Delay Time dropdown (supports 1 minute, 5 minutes, 10 minutes, 15 minutes, 30 minutes).
- Click OK to save the configuration.
Scope of Impact¶
- Affected: Log query behavior. After enabling, when all users query logs, only data before the delay window is returned.
- Not Affected: Log data ingestion, monitor detection, alert triggering, event generation, data forwarding, and other internal system processes.
