That's too bad. I'm going to open a support case to see if they have any words of wisdom. I'll post here if we find a fix. Thanks for responding!
... View more
Did you ever figure this out? Right now my Cisco dashboards load ridiculously slow and I assumed it was due to a missing summary index of some sort. I haven't had time to dig into it at the level you have, so I was hoping for a quick fix. Thanks!
... View more
There's a bug in the Top 10 Alerts and Last 10 Intrusion Events sections of the dashboard. The searches for these two sections perform a "join sid [search rule_records]" when they should really be performing a "join sid,gen [search rule_records]". SID alone does not uniquely identify a rule, you have to use the SID and the generator (gen).
... View more