The @ingesttimestamp field represents when an event was ingested, stored in milliseconds-since-epoch. Searches can use this timestamp to restrict data access.