Cisco Bug: CSCte60472 - Query with keyword doesn't always return expected result
Feb 22, 2014
- Cisco Security Monitoring, Analysis and Response System
Known Affected Releases
Symptom: This happens only with certain configurations. It is not clear why think does not happen for most customers but it does for another customer. This issue is twofold and both parts only apply to some data: 1. When filtering for event type only, not all events of this type are displayed. When filtering for a specific user via the "Keyword" field in addition, events for this user are shown, although they have not been displayed when filtering for the event type only 2. Filtering for event type only gives more results, than filtering for event type and keyword, although the keyword matches several entries of the original output Conditions: This has first been observed on a MARS-110R running software version 6.0.5. Other platforms and software versions might be affected as well.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases