IJ45191: OFFENSE SUMMARY PAGE EVENT/FLOW COUNT FIELD DOES NOT MATCH THE EVENT COUNT IN LOG ACTIVITY

APAR status

• Closed as program error.

Error description

• The event count in the Offense summary page does not match with
  the event count when a search for events is run on the Log
  Activity tab.
  
  The display issue occurs when partial matches are not included
  in the event count.
  
  For example,
  1. An offense is generated and the Event/Flow Count field
  displays 7 events in the user interface.
  2. The user clicks the Event/Flow Count to run the search to
  drill in to the events.
  
  Result
  The search result on the Log Activity tab displays 11 events,
  instead of the expected 7 results from the Offense Summary. This
  is due to partial matches that are not included in the numeric
  count of the Event/Flow Count field.
  
  It is expected that the Offense Summary displays the correct
  count and includes partial matches to ensure the numeric value
  and search results match.
  

Local fix

• No workaround available. APARs identified as 'No workaround
  available' require a software delivery to resolve.
  Administrators can subscribe to the APAR to receive updates when
  software releases are published for this issue.
  

Problem summary

• This issue has been resolved in QRadar 7.5.0 Update Package 5.
  

Problem conclusion

• This issue has been resolved in QRadar 7.5.0 Update Package 5.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  QRADAR SOFTWARE

• Fixed component ID

  5725QRDSW

Applicable component levels