# Ingestion Lag

```
| where ingestionTime > 5m
```

Setting:
* Run query every 5m
* Lookup data from the last 24 hours
* Stop running query after alert disabled