000032748 - Incidents are not flagged when a user manually adds the alerts to existing incidents in RSA Security Analytics 10.6

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000032748
Applies ToRSA Product Set: Security Analytics
Product/Service Type: Incident Management
RSA Version/Condition: 10.6
IssueInvestigation values are not highlighted when alerts in Incident Management have manually been added to an incident.  Alerts that are dynamically added to an incident will get highlighted.
CauseThis happens only when an alert is manually added to an incident beyond 30 minutes of flag construction schedule.
ResolutionThis issue is being investigated by the Engineering team in order to provide a permanent resolution in a future release.