gaetansimo
Making Connections
21 days agoSentinel event-marker.txt
Hi,
For logs that are integrated with Cato, the log acquisition location is remembered using files such as "event-marker.txt."
We would like to confirm the behavior of this marker. For example, if the Azure Functions timer trigger does not start properly and is skipped, will logs that have not been integrated into the Log Analytics workspace be integrated based on the value of the marker?
If they are integrated, is there is a limit to the number of logs that can be retrieved using the marker (number of logs or time)?
Thank you