Issues with Zeek Log Analysis - Any Best Practices?

[johanna]

Hi.

can you detail what you mean by “delayed responses”?

Does this mean that the log lines are written with a significant delay after an event happened? How long is the delay?