Baseline data is not retrieved

Sometimes when you view the Flow Record Analytics page, a No baseline data retrieved message is displayed and the data is not loaded on some or all flow records.

When a flow record does not load, it is often because stale data is present in QRadar® from a previous installation of QRadar Network Threat Analytics.

Stale data occurs when you uninstall the QRadar Network Threat Analytics app by using the Extensions Management tool instead of uninstalling from the QRadar Network Threat Analytics Settings.

The issue resolves as new data replaces the stale data. Alternatively, you can uninstall the app from the QRadar Network Threat Analytics Configuration page and then reinstall the app. Reinstalling the app requires the app to recreate the network baseline, which takes extra time.