000032669 - Investigation against dashboard results in a query without quotes in RSA Security Analytics Investigation page

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000032669
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: SA Security Analytics UI
RSA Version/Condition: 10.5.0.0
Platform: CentOS
O/S Version: 6
 
IssueWhen investigating against dashboard, the query in the investigation page comes without quotes which results in retrieving the log data inaccurately in the investigation page.
Investigating dashboard:
.User-added image
After redirecting to investigation, quotes are missing for the query as highlighted below:
User-added image
CauseThis issue has been identified as a defect in the GUI.
ResolutionThis issue has been fixed in 10.6 and 10.5.2.1 versions.
WorkaroundPlease use below steps as work around.
Edit the query manually to place quotes for meta values as below.
User-added image

Attachments

    Outcomes