Account for race condition in the design pattern recommendations for ingestion delay

[NWc0de]

I describe the issue in detail in https://medium.com/@nwcodex/ingestion-delay-variance-race-conditions-in-seim-systems-8ffc3e298f32. Important aspect here is to let the user know they should consider and design with the race in mind. I don't yet have a good design or conceptual fix.

[NWc0de]

@microsoft-github-policy-service agree

[prmerger-automator]

@NWc0de : Thanks for your contribution! The author(s) have been notified to review your proposed change.

[learn-build-service-prod]

Learn Build status updates of commit 221d5fc:

✅ Validation status: passed

File	Status	Preview URL	Details
articles/sentinel/ingestion-delay.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[Court72]

@limwainstein

Can you review the proposed changes?

When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

[limwainstein]

@batamig @yelevin Can you please assign this to the new owner? Thx

[batamig]

#label:"backlog-item-created"
#assign: @yelevin

[batamig]

Thanks for the recommendation @NWc0de! We're going to look into this and pull your changes into our own branch to make any required updates, and I've opened a backlog item to handle the work.

[yelevin]

@NWc0de I echo @batamig 's comment above. I'll add that we're in discussion with the product team about this.

[NWc0de]

No problem, thank you for the review (:

I've removed the references to Splunk (sorry about that 😅 , typo left over from when I wrote this up to send a colleague about the way it may show up in our other SIEMS).

[learn-build-service-prod]

Learn Build status updates of commit 72b0c4b:

✅ Validation status: passed

File	Status	Preview URL	Details
articles/sentinel/ingestion-delay.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel