This is due to the de-duplication functionality which is set by default to 15 minutes.
During this period, AD Queries will be hold in the Agent to compare to incoming new ones
Every identical query will be dropped to avoid noise and after that interval, the Event will be sent to Coordinator and displayed in the Client
This comportment is explained here
It is possible to tweak the interval to reduce it but this might increase significantly the Event count
© ALL RIGHTS RESERVED. Feedback Conditions d’utilisation Confidentialité Cookie Preference Center