As almost every user action in Workday is logged as an activity in Workday audit logs, it can many API calls to keep event processing current. Because of this limitation of the Workday API, near real-...As almost every user action in Workday is logged as an activity in Workday audit logs, it can many API calls to keep event processing current. Because of this limitation of the Workday API, near real-time DLP is not always possible. An API call can take 6–7 seconds when there is a backlog of events to be polled from Workday. To further complicate this issue, the delay causes time stamps we are polling for are a few minutes old, which impacts our ability to catch up with the event backlog.