|Applies To||RSA Security Analytics|
RSA Security Analytics 10.3.2
RSA Security Analytics 10.3.3
RSA Security Analytics Concentrator
|Issue||Investigations are returning inconsistent results in RSA Security Analytics 10.3 SP2 and SP3.|
Drilling into sessions displays a different number of sessions than were initially displayed.
Event Reconstruction may fail when attempting to view details from a specific session.
A hotfix is available at Security Analytics 10.3.3 that can be applied to all concentrator appliances that will resolve the issue. To download and install the hotfix, follow the steps below.
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.
|Notes||CAUTION! The hotfix may only be applied to concentrators that have already been upgraded to Security Analytics 10.3 SP3 and should not be applied to concentrators at version 10.3 SP2.|
|Legacy Article ID||a66781|