Eric Crawford

lost endpoint event alert details after 11.4 upgrade

Discussion created by Eric Crawford Employee on Feb 19, 2020

Internal Use - Confidential


Hi folks,


Looking for some guidance troubleshooting an issue that cropped up in a training NW Endpoint environment after upgrading from to 11.4.


Looking at host details in the original 11.3, I see the historical alert details I need:




In 11.4, this information is lost.  Retention/group policies were not altered. Any suggestions?  Am not sure if I need to go back to the 11.3 version and upgrade again or not - any suggestions of what to check or change appreciated.


Here is 11.4 screen, and after checking snapshots from months ago, the details are also missing there even though the snapshot is supposedly available:




Eric Crawford

Senior Advisor, Customer/Technical Training |  RSA