Understanding of debug logs


when incoming and outgoing data will add in debug logs ? whether it write the information parallely when cpe and server are in session or once session completed?

In debuglogs , I have seen the debuglogs there are two timestamp are there ,

event: incoming HTTP request

timestamp: 2024-05-09T04:15:22.402Z

connection: 2024-05-09T04:15:22.402Z

what is the difference between these dates?

And it will give exact time when password authentication happened and password update happened on server? or will write all the data in debug logs once entire session completed.