This document lists the fixes made to improve NetWitness Platform 11.5. Read this document before deploying or upgrading to NetWitness Platform 220.127.116.11.
This section lists issues fixed since the last major release.
Core Services (Broker, Concentrator, Decoder, Archiver) Fixes
|When running a query in Investigate, Broker performance issues are seen intermittently.|
Event Stream Analysis (ESA) Fixes
Some data aggregation performance improvements made to the ESA Correlation server.
A named window snapshot gets overwritten when a rule with a named window gets disabled and re-enabled.
In NetWitness Platform versions 11.3.x, 11.4.x, and 18.104.22.168, to avoid data being overwritten, if you have a rule with a named window, you cannot disable and then re-enable it. Instead, you must undeploy and redeploy the ESA rule deployment that contains the rule. This issue is fixed in 22.214.171.124.