This document lists the fixes made to improve NetWitness Platform 11.5. Read this document before deploying or upgrading to NetWitness Platform

Fixed Issues

This section lists issues fixed since the last major release.

Core Services (Broker, Concentrator, Decoder, Archiver) Fixes

Tracking NumberDescription
When running a query in Investigate, Broker performance issues are seen intermittently.


Event Stream Analysis (ESA) Fixes

Tracking NumberDescription

Some data aggregation performance improvements made to the ESA Correlation server.


A named window snapshot gets overwritten when a rule with a named window gets disabled and re-enabled.

In NetWitness Platform versions 11.3.x, 11.4.x, and, to avoid data being overwritten, if you have a rule with a named window, you cannot disable and then re-enable it. Instead, you must undeploy and redeploy the ESA rule deployment that contains the rule. This issue is fixed in