When trying to view event details the window says text invalid or missing event guid

Products

• Security Information Manager

Issue/Introduction

When trying to view event details within the console incident manager the popup window is blank with the text invalid or missing event guid.

Event Details window completely blank - "Invalid or missing event guid"

The Web API returns the error ID:222128 - Error in retrieving Event ID: NOT ARCHIVED

Cause

The incident manager is looking for events on the wrong SSIM.

Resolution

Verify the correlation and forwarding configurations on the servers.