When in Investigation/Navigate view, the events graph time is not updating when I click the refresh button. The current time is not updating. So as time advances the graph will eventually no longer be visible. The start time will continue to move to the right each time I click the refresh button. How do I fix this?
Thanks for reading my question and offering advice.
You can go to explore-->SDK-->config-->cache.window.minutes on your brokers and concentrators. Make sure to make the change on all Brokers and Concentrators to get the desired effect. Just know that when you lower this setting you are making the concentrator work harder so be sure to monitor any performance changes
"The cache window in minutes, inside the interval the SDK summary message will always return the same ranges. Zero means always return the latest. Change takes effect immediately"
Optimization Techniques - RSA Security Analytics Documentation
Thanks, for answering my question.
Personally I have always found the navigate refresh button pretty flaky and it still is in 10.6.1. The only way I find to reliably update the timeline is to use your browser refresh instead.