Article Number
000002743
Applies To
RSA Product Set: Security Analytics
RSA Product/Service Type: SA Security Analytics UI
RSA Version/Condition: 10.6.2.0
Issue
When trying to run custom investigation using specific time frame, we are always seeing data beyond this time frame as seconds aren't counted; it only took the hours and minutes into consideration.
Resolution
- The product is working as designed.
"If you specify custom start or end times in seconds, the value for start time in seconds will always default to :00, and the value for end time in seconds will always default to :59. For example, if you are using time to drill down into an issue, the drill time will be interpreted as "HH:MM:00 - HH:MM:59." Seconds display in this format in Investigation > Navigate functions."