Skip to main content
Panther Knowledge Base

Why do I experience delays in parsing Google Workspace events within my Panther Console?

QUESTION

Why do I experience delays in parsing Google Workspace events within my Panther Console?

"p_event_time": "2022-12-05 22:39:39.597000000"
"p_parse_time": "2022-12-06 01:11:00.448921395"

ANSWER

This latency is expected for Google workspace events and is caused by Google's Data Lag times. 

Based on the event, it can take minutes or even days before Google emits this data. 

A deeper analysis of Google's Lag times per event type is available on the official Google Data Retention & Lag Times page.