What is the difference between detection time and insertion time?

mackie

To LEM community,

What is the difference between detection time and insertion time?

Is the detection time coming from the device log and insertion time coming from LEM inserting the information to the database?

evanr

Here is what the UserGuide says:

InsertionTime = The time the manager or agent first created the alert.  This time indicates when the data was read from a log file or other source.

DetectionTime = The time the network node generated the data.  This is usually the same as the InsertionTime field, but they can differ when the Agent or Manager is reading historical data, or if a network device has an incorrect time setting.