Custom TOP N reports in existing or new dashboards missing data for last one hour in the first initial login to CAPC
Top Hosts /Top Protocols/Top Conversations
Workaround for this is to change the report period to some other time like 8 hours and then change again to 1 hour to get the data to display for the last 1 hr .
Release : CAPC 20.2.7/ NFA 10.0.5
Component : NETWORK FLOW ANALYSIS CAPC
The main issue is that the StartTime and EndTime query params in the URL are overriding the values from the Date-Time picker for the specific Top N NFA views.
The reading of query params from URL is required for Top N NFA views to handle the navigation properly in context pages.
The fix for this will be available in the PC 21.2.8 release which is planned to be released tentatively by end of Feb 2022