About Metrics in the Ingest monitoring dashboard

The metrics displayed in the Ingest monitoring dashboards are derived from the results of saved searches. The app starts collecting data from these searches only after you turn on Ingest Monitoring.

Note the following:

• Once Ingest monitoring is turned on, or when searches are resumed after being paused, the metrics may initially appear incomplete as the data collection process begins and builds over time.
• The app does not collect data for historical periods before Ingest monitoring was turned on or during times when it was paused.

Metrics Index

Ingest monitoring uses a dedicated metrics index, named _metrics, to populate its dashboards. Metrics indexes provide faster data processing compared to event indexes, and have a 14-day data retention period.