|Applies To||RSA Product Set: Security Analytics|
RSA Product/Service Type: Security Analytics UI
RSA Version/Condition: 10.4.x
O/S Version: EL6
|Issue||When an index level of a meta key used in a custom meta group is changed on any core device (via the custom index xml file), it may cause an investigation of another core device to use the incorrect index level for that meta key.|
When a user is querying data using a custom meta group, this issue may be visible in the Navigate view and in the Manage Meta Groups dialog box.
In the Navigate view, a meta key that is expected to be indexed may be labeled as Not Indexed and cannot be opened. The non-indexed meta key may take longer to load as a result.
The following message may be displayed next to an Open meta key in the Manage Meta Groups dialog: Not Indexed; will experience longer than usual load times.
|Workaround||The issue can be worked around by logging out then back into the Security Analytics UI. This issue is only seen when custom meta is in use.|