What does ingestion time mean in CloudWatch

There are two timestamp fields, here.

The timestamp is the time the event was said to have occurred, according to the message that was sent to CloudWatch.

The ingestionTime is the time CloudWatch actually received the message about the event.

The difference between the two -- assuming all clocks are accurate -- is the delay between when the event occurred and when CloudWatch received and "ingested" (was fed, ate, consumed) the message about the event.


According to my own investigations it looks like lastEventTimestamp is time of last event received by CloudWatch, however its update is slightly delayed, according to the documentation:

The lastEventTime value updates on an eventual consistency basis. It typically updates in less than an hour from ingestion, but may take longer in some rare situations.

On the other hand, lastIngestionTime shows the indicated timestamp of last event received to the stream. And this one gets updated immediately after the event was received by CloudWatch service.

So if you are looking for timestamp of most recent event in the stream, you are probably looking for lastIngestionTime.