{ "Application": { "batch_read_period": { "histogram": { "count": 2011, "max": 47399062500, "mean": 139870373.828125, "median": 67296650, "min": 53188000, "p75": 89462100, "p95": 216783225, "p99": 305816100, "p999": 46227635937.50107, "stddev": 1478829282.4627194 } }, "discarded_events_total": 0, "errors_total": 33, "id": "Application", "input": "Application", "provider": "Application", "received_events_count": { "histogram": { "count": 2012, "max": 100, "mean": 99.7099609375, "median": 100, "min": 1, "p75": 100, "p95": 100, "p99": 100, "p999": 100, "stddev": 5.350677016016209 } }, "received_events_total": 200794, "source_lag_count": { "histogram": { "count": 0, "max": 0, "mean": 0, "median": 0, "min": 0, "p75": 0, "p95": 0, "p99": 0, "p999": 0, "stddev": 0 } }, "source_lag_time": { "histogram": { "count": 200794, "max": 27995424000, "mean": 13899967770.996094, "median": 12421577550, "min": 1011228700, "p75": 13336987375, "p95": 27559823150, "p99": 27898825025, "p999": 27993994465, "stddev": 5687035237.580204 } } }, "ForwardedEvents": { "batch_read_period": { "histogram": { "count": 0, "max": 0, "mean": 0, "median": 0, "min": 0, "p75": 0, "p95": 0, "p99": 0, "p999": 0, "stddev": 0 } }, "discarded_events_total": 0, "errors_total": 0, "id": "ForwardedEvents", "input": "ForwardedEvents", "provider": "ForwardedEvents", "received_events_count": { "histogram": { "count": 0, "max": 0, "mean": 0, "median": 0, "min": 0, "p75": 0, "p95": 0, "p99": 0, "p999": 0, "stddev": 0 } }, "received_events_total": 0, "source_lag_time": { "histogram": { "count": 0, "max": 0, "mean": 0, "median": 0, "min": 0, "p75": 0, "p95": 0, "p99": 0, "p999": 0, "stddev": 0 } } }, "Microsoft-Windows-PowerShell/Operational": { "batch_read_period": { "histogram": { "count": 12, "max": 1734369636800, "mean": 147670302166.66666, "median": 1035550500, "min": 7309300, "p75": 2055043175, "p95": 1734369636800, "p99": 1734369636800, "p999": 1734369636800, "stddev": 478462497610.0112 } }, "discarded_events_total": 0, "errors_total": 33, "id": "Microsoft-Windows-PowerShell/Operational", "input": "Microsoft-Windows-PowerShell/Operational", "provider": "Microsoft-Windows-PowerShell/Operational", "received_events_count": { "histogram": { "count": 13, "max": 18, "mean": 4.769230769230769, "median": 3, "min": 1, "p75": 7, "p95": 18, "p99": 18, "p999": 18, "stddev": 4.610253558083599 } }, "received_events_total": 62, "source_lag_count": { "histogram": { "count": 0, "max": 0, "mean": 0, "median": 0, "min": 0, "p75": 0, "p95": 0, "p99": 0, "p999": 0, "stddev": 0 } }, "source_lag_time": { "histogram": { "count": 62, "max": 1493885057100, "mean": 24777602395.16129, "median": 741449000, "min": 67502800, "p75": 989167100, "p95": 1501356874.9999993, "p99": 1493885057100, "p999": 1493885057100, "stddev": 188100320386.88278 } } }, "Security": { "batch_read_period": { "histogram": { "count": 3, "max": 1448410044300, "mean": 521763596833.3333, "median": 76786930100, "min": 40093816100, "p75": 1448410044300, "p95": 1448410044300, "p99": 1448410044300, "p999": 1448410044300, "stddev": 655409197934.4912 } }, "discarded_events_total": 0, "errors_total": 33, "id": "Security", "input": "Security", "provider": "Security", "received_events_count": { "histogram": { "count": 4, "max": 19, "mean": 12, "median": 13.5, "min": 2, "p75": 18, "p95": 19, "p99": 19, "p999": 19, "stddev": 6.284902544988268 } }, "received_events_total": 48, "source_lag_count": { "histogram": { "count": 0, "max": 0, "mean": 0, "median": 0, "min": 0, "p75": 0, "p95": 0, "p99": 0, "p999": 0, "stddev": 0 } }, "source_lag_time": { "histogram": { "count": 48, "max": 2650382600, "mean": 1493106943.75, "median": 1515685100, "min": 148844300, "p75": 2410869425, "p95": 2624461475, "p99": 2650382600, "p999": 2650382600, "stddev": 733685864.381841 } } }, "System": { "batch_read_period": { "histogram": { "count": 23, "max": 857020243600, "mean": 78600814317.39131, "median": 16144814200, "min": 208966500, "p75": 63570674500, "p95": 720192325759.998, "p99": 857020243600, "p999": 857020243600, "stddev": 173817270620.90332 } }, "discarded_events_total": 0, "errors_total": 33, "id": "System", "input": "System", "provider": "System", "received_events_count": { "histogram": { "count": 24, "max": 100, "mean": 25.583333333333332, "median": 1.5, "min": 1, "p75": 68, "p95": 100, "p99": 100, "p999": 100, "stddev": 42.04552757296417 } }, "received_events_total": 614, "source_lag_count": { "histogram": { "count": 0, "max": 0, "mean": 0, "median": 0, "min": 0, "p75": 0, "p95": 0, "p99": 0, "p999": 0, "stddev": 0 } }, "source_lag_time": { "histogram": { "count": 614, "max": 2413466556724400, "mean": 539992060056155.5, "median": 2141712229500, "min": 861853700, "p75": 2193171068975, "p95": 2413442340043975, "p99": 2413465220493755, "p999": 2413466556724400, "stddev": 1004010507838966.4 } } }, "Windows PowerShell": { "batch_read_period": { "histogram": { "count": 8, "max": 1607759199500, "mean": 221793914650, "median": 10660494600, "min": 1012692000, "p75": 90031596875, "p95": 1607759199500, "p99": 1607759199500, "p999": 1607759199500, "stddev": 524959095534.71497 } }, "discarded_events_total": 0, "errors_total": 33, "id": "Windows PowerShell", "input": "Windows PowerShell", "provider": "Windows PowerShell", "received_events_count": { "histogram": { "count": 9, "max": 35, "mean": 7.222222222222222, "median": 2, "min": 1, "p75": 8.5, "p95": 35, "p99": 35, "p999": 35, "stddev": 10.314798191355713 } }, "received_events_total": 65, "source_lag_count": { "histogram": { "count": 0, "max": 0, "mean": 0, "median": 0, "min": 0, "p75": 0, "p95": 0, "p99": 0, "p999": 0, "stddev": 0 } }, "source_lag_time": { "histogram": { "count": 65, "max": 2413403026172000, "mean": 112306607370540, "median": 1386083482300, "min": 69855600, "p75": 2091282271300, "p95": 1690025287251649.8, "p99": 2413403026172000, "p999": 2413403026172000, "stddev": 506174431675717.9 } } } }