This section lists issues fixed after the last major release. For additional information on fixed issues, see the Fixed Version column in the NetWitness® Platform Known Issues list on NetWitness Community Portal.
||Multiple operations fail after you enable logging for CRUD operation on app rules and use separate API for ADD, DELETE, and UPDATE.
||The Jobs (Admin > System > Jobs) with lengthy queries take a long time to load. As a result, the load time of the Jobs page is affected.
||Network adapter in promiscuous state is not identified due to querying wrong wmi namespace by NetWitness agent.
||Failed icon is displayed beside the agent version (Hosts> Agent History) when there is a time difference between agent and server.
||Aggregation syntax count is not displayed in the report, when you try to create a report with metas such as alert.name, alert.severity,count (alert.numEvents).
Core Services (Broker, Concentrator, Decoder, Archiver) Fixes
||Brotil data fails to decompress in Events page (Investigate> Events). When exporting data, it is decompressed but on Events page invalid data is displayed.
||Due to the large size of incoming logs aggregation fails and archiver service crashes. The mem page issue occurs if sessions to be aggregated from log decoder are with large packet andlog sizes.
Reporting Engine Fixes
NetWitness Weekly Scheduled Reports run on a different day after conversion to UTC flows into either the previous or next day for time zones other than the UTC time zone
Log Collection Fixes
After upgrading to 126.96.36.199, WinRM log collection is interrupted due to the conflict in the internal artifact. As a result, logs are not collected from the WinRM server.