.png?width=180&height=32&name=NW%20Logo%20(2).png){kind=small}
RSA Security Analytics 10.6.5 Known Issues Master List
Issue
Below is a list of known issues in RSA Security Analytics 10.6.5.0, including those listed in the Release Notes.Please click on the links to go directly to the articles.
Installation and Update
- Article Number: 000035746
- Article Title: Incorrect version is displayed when you update from 10.5.2.0 to 10.6.0.1 or later
- Tracking Number: ASOC-17443
- Article Number: 000035747
- Article Title: Security Analytics UI displays an error when you click Move to Repo
- Tracking Number: ASOC-17654
- Article Number: 000035748
- Article Title: Issue with All-in-One Logs upgrade from 10.5.2.0 or 10.6.0.0 to 10.6.4.0 due to rabbitmq
- Tracking Number: ASOC-21194
- Article Number: 000035749
- Article Title: Issue with SA UI available after All-in-One during Security Analytics 10.6.0.0 to 10.6.4.0 upgrade
- Tracking Number: ASOC-23344
- Article Number: 000035750
- Article Title: Few RPMs are not installed when you update Security Analytics from 10.5.2.1 to 10.6.4.0
- Tracking Number: ASOC-25944
- Article Number: 000035751
- Article Title: sa.repo file gets modified during an update from 10.5.2.0 or 10.5.2.1 to 10.6.4.0 through RSA Link
- Tracking Number: ASOC-25943
- Article Number: 000035752
- Article Title: Update from 10.6.3.0 to 10.6.4.0 changes the PAM server config file
- Tracking Number: ASOC-33289
Security Issues
- Article Number: 000035753
- Article Title: Issue with alias name in the Security Analytics Server certificate
- Tracking Number: SACE-7700
General Application Issues
- Article Number: 000030481
- Article Title: "This page can't be displayed" error when attempting to login into the RSA Security Analytics UI with Internet Explorer 10
- Tracking Number: ASOC-9225
General Platform Issues
- Article Number: 000030363
- Article Title: No cancel option is available for Warehouse Analytics jobs in RSA Security Analytics
- Tracking Number: SAENG-4706, SAENG-5755
Entitlements and Licensing
- Article Number: 000030511
- Article Title: Metered license does not flip back to in compliance immediately when there are no services attached to that Metered license in Security Analytics
- Tracking Number: ASOC-9078
- Article Number: 000030832
- Article Title: Aggregate usage report is generated incorrectly in RSA Security Analytics 10.5.0.1 and above
- Tracking Number: ASOC-10079
Security Analytics Log Collector
- Article Number: 000030374
- Article Title: Repeated errors are seen when a domain name is not resolvable from a Windows Legacy Collector server in RSA Security Analytics
- Tracking Number: SAENG-2476
- Article Number: 000030517
- Article Title: The Data Privacy Officer role is missing on Log Collectors in RSA Security Analytics
- Tracking Number: ASOC-7937
- Article Number: 000030519
- Article Title: Checkpoint collection not working and reports the error "peer ended the session" in RSA Security Analytics
- Tracking Number: ASOC-8351
- Article Number: 000032747
- Article Title: Throttling Remote Collector to Local Collector bandwidth is not persistent after rebooting in RSA Security Analytics 10.6
- Tracking Number: ASOC-16717
- Article Number: 000035754
- Article Title: Cloudtrail event source test connection fails with an error
- Tracking Number: ASOC-37288
Security Analytics Investigation
- Article Number: 000030497
- Article Title: Parallel Coordinate visualization is not displaying special characters correctly on Security Analytics
- Tracking Number: ASOC-9346
- Article Number: 000032748
- Article Title: Incidents are not flagged when a user manually adds the alerts to existing incidents in RSA Security Analytics 10.6
- Tracking Number: ASOC-16640
Security Analytics Workbench
- Article Number: 000030504
- Article Title: Empty collection is created if restoration fails because workbench service is stopped or restarted on RSA Security Analytics
- Tracking Number: ASOC-6859
- Article Number: 000030507
- Article Title: All restoration collections created at version 10.4.x will have blank date values after upgrading to RSA Security Analytics 10.5 or above
- Tracking Number: ASOC-9087
- Article Number: 000030508
- Article Title: The Date Range is not displayed for collections if services are restarted while restoration is in progress in RSA Security Analytics
- Tracking Number: ASOC-6822
- Article Number: 000030507
- Article Title: All restoration collections created at version 10.4.x will have blank date values after upgrading to RSA Security Analytics 10.5 or above
- Tracking Number: ASOC-9035
Security Analytics Malware Analysis
- Article Number: 000016980
- Article Title: Unable to perform Malware Analysis On-Demand scans using trusted connections in RSA Security Analytics 10.4.x and above
- Tracking Number: SAENG-5485
- Article Number: 000030501
- Article Title: The View Network Session option is disabled for Malware Analysis events if the core device is not configured correctly in RSA Security Analytics
- Tracking Number: ASOC-5571
- Article Number: 000032750
- Article Title: Upload Scan Job does not get submitted to Colo Malware if standalone Malware is also present in RSA Security Analytics environment
- Tracking Number: ASOC-9821
Security Analytics Incident Management
- Article Number: 000032740
- Article Title: View Original Event returns stack trace when no concentrator is available in RSA Security Analytics 10.6
- Tracking Number: ASOC-14266
- Article Number: 000033049
- Article Title: Out-of-the-box Aggregation Rules in Incident Management are duplicated after upgrading to RSA Security Analytics 10.6
- Tracking Number: ASOC-15031
- Article Number: 000032723
- Article Title: Incident Management becomes unresponsive while loading large number of alerts in RSA Security Analytics
- Tracking Number: ASOC-16900
Security Analytics Event Stream Analysis (ESA)
- Article Number: 000030359
- Article Title: Synchronization / Deployment fails for the ESA rule “No Log Traffic detected from device in given time frame” deployed from Live in RSA Security Analytics
- Tracking Number: SAENG-5888
- Article Number: 000030360
- Article Title: Case-sensitive sorting is not working properly in the ESA All Rules grid in RSA Security Analytics
- Tracking Number: SAENG-3605
- Article Number: 000030554
- Article Title: ESA rule deployment fails if the server that hosts an external database goes down in RSA Security Analytics
- Tracking Number: ASOC-9011
- Article Number: 000031334
- Article Title: ESA Alerts Summary page is blank or displays "Error getting data" in the RSA Security Analytics UI
- Tracking Number: ASOC-9016, ASOC-9026
- Article Number: 000032752
- Article Title: Forwarding rule name is not updated when the advanced rule name changes in RSA Security Analytics
- Tracking Number: ASOC-9585
- Article Number: 000035755
- Article Title: ESA Displays Warning For Array Operators
- Tracking Number: ASOC-14157
- Article Number: 000035757
- Article Title: Group Aggregation EPS rate drops when native aggregation from single source is triggered in parallel
- Tracking Number: ASOC-20026
- Article Number: 000035767
- Article Title: Warm-up Duration is Retained When Changing from Packet to Log Automated Threat Detection and vice-versa
- Tracking Number: ASOC-22226
- Article Number: 000035768
- Article Title: When you switch from Automated Threat Detection for Logs (Using Query-Based Aggregation) to Packets, the mechanism does not change
- Tracking Number: ASOC-23874
- Article Number: 000035769
- Article Title: Trial rules configuration: Out-of-Bound Values are Capped
- Tracking Number: ASOC-6633
- Article Number: 000035770
- Article Title: Event Stream Analysis service becomes unresponsive under heavy load
- Tracking Number: ASOC-25174
Security Analytics Reporting Engine
- Article Number: 000030386
- Article Title: Live deployment of Reporting Engine rules and reports fail due to missing dependencies in RSA Security Analytics
- Tracking Number: SAENG-1334
- Article Number: 000030390
- Article Title: Reporting Engine may become blocked in RSA Security Analytics when RabbitMQ connections have a blocked state
- Tracking Number: SAENG-5329
- Article Number: 000030564
- Article Title: Updates to connection parameters on the Service page do not reflect on the Reporting Data sources in RSA Security Analytics
- Tracking Number: ASOC-8149
- Article Number: 000030569
- Article Title:
Summary
This article lists the known issues in NetWitness Logs & Network\Security Analytics 10.6.5.0