You can indicate how often the Logfile Entry policy should read the logfile. This period of time is the polling interval. The polling interval should be as large as possible, although this depends on the amount of new data written to the file and the read mode that you choose. As a minimum, set the interval for more than 30 seconds; usually 5 minutes is appropriate. Note, however, that a policy begins to evaluate data after the first polling interval passes. A shorter polling interval is better when you are testing a policy.
Related Topics: