After configuring the SIEM agent with a Cron job, the SIEM agent is not moving forward but repeatedly pooling the same log.
SIEM agent version 2.5.1
--start_date Start date from which logs are fetched. This overrides any previous state of the agent.
The customer can run the agent once with the start_date filter and then on the cron job no start_date filter is needed.