Preview Tool

Cisco Bug: CSCte60472 - Query with keyword doesn't always return expected result

Last Modified

Feb 22, 2014

Products (1)

  • Cisco Security Monitoring, Analysis and Response System

Known Affected Releases


Description (partial)

This happens only with certain configurations.  It is not clear why think does not happen for most customers but it does for another customer.
This issue is twofold and both parts only apply to some data:

1. When filtering for event type only, not all events of this type are
   displayed. When filtering for a specific user via the "Keyword" field
   in addition, events for this user are shown, although they have not
   been displayed when filtering for the event type only

2. Filtering for event type only gives more results, than filtering for 
   event type and keyword, although the keyword matches several 
   entries of the original output

This has first been observed on a MARS-110R running software version 6.0.5. Other platforms and software versions might be affected as well.
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.