Last Log Received on the Health Overview page of the Fleet management UI may intermittently show no data

In Fleet management UI, the Last Log Received panel on the Health Overview page may show no data for a SIEM, even though the log sources on that SIEM are active and receiving logs.

The issue is intermittent. The panel may show data in one 5-minute update cycle and no data in the next. The issue affects only how Fleet management UI displays this data. The SIEM continues to receive logs from its log sources.

If your deployment is affected by this issue, you may see the following signs:

• The Last Log Received panel on the Health Overview page is empty for a SIEM with active log sources.
• The panel switches between showing data and showing no data across 5-minute update cycles.
• The log sources on the SIEM show recently received logs, but Fleet management doesn't.