Opened the CloudSOC Tenant > Detect > Incidents and clicked on the Anomalous activity entries for review; found both Service and User fields blank.
Confirmed Detector > Details window returns: No activity logs found, as follows:
Confirmed when clicking on the View Logs in Investigate icon as follows and found No Data:
This is currently being reviewed by Symantec Corp. and will be resolved in a future release of CloudSOC.
Please subscribe to this article to receive email notification as soon as it has been updated.