|Applies To||RSA Product Set: Security Analytics, NetWitness Logs & Network|
Product/Service Type: Incident Management, Respond Server
RSA Version/Condition: 10.6.x, 11.0.x, 11.1.x, 11.2.x, 11.3.x.
|Issue||Investigation values are not highlighted when alerts in Incident Management (SA 10.6.x) or RESPOND(NW 11.x) have manually been added to an incident. Alerts that are dynamically added to an incident will get highlighted.|
|Cause||This happens only when an alert is manually added to an incident beyond 30 minutes of flag construction schedule.|
|Resolution||This issue is being investigated by the Engineering team in order to provide a permanent resolution in a future release.|