IJ47587: RULE WIZARD FOR ADE RULES DOES NOT PRESERVE THE STATE OF THE 'TEST SEPARATELY' CHECK BOX

APAR status

• Closed as program error.

Error description

• Users on QRadar 7.5.0 Update Package 3 and later who edit an
  Anomaly Detection Engine rule in the Rule Wizard experience an
  issue where the 'Test Separately' check box state is not
  preserved. This can lead to confusion for users when the state
  of the check box does not display selected. Saving a rule change
  without selected the 'Test Separately' check box can cause
  unexpected rule behavior in anomaly rules for users.
  
  
  This issue affects the 'Test separately' check box for
  following rules:
  - Anomaly
  - Behavioral
  - Threshold
  

Local fix

• Users must confirm the 'Test Separately' check box is selected
  each time an Anomaly, Behavioral, or Threshold rule is edited in
  the Rule Wizard.
  

Problem summary

• The 'Test Separately' check box in the Rule Wizard interface is
  preserved after users apply QRadar 7.5.0 Update Package 7.
  

Problem conclusion

• This issue is resolved in QRadar 7.5.0 Update Package 7.
  
  To view all issues in this release, see the QRadar Software 101
  page (https://www.ibm.com/community/qradar/home/software/).
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  QRADAR SOFTWARE

• Fixed component ID

  5725QRDSW

Applicable component levels