ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Anomalous reporting of usernames

book

Article ID: 172663

calendar_today

Updated On:

Products

CASB Gateway CASB Gateway Advanced Data Loss Prevention Cloud Package

Issue/Introduction

User names showing in Tenant as IP addresses at random

Cause

Confirmed same user is being pulled from two different SpanVA's and the latest SpanVA data will display as current. This caused IP addresses to be pulled in as part of the usernames.

Environment

CloudSOC 2.x

Resolution

Deleted the old/bad SpanVA as a log source and powered off the device.

Accessed Audit > Users page; confirmed it now consistently shows the usernames.