Event classifications and mitigations don't take effect

Products

• Information Centric Analytics

Issue/Introduction

When portal users classify or mitigate DIM and authentication events in the Information Centric Analytics (ICA) console, the user is notified that records are being updated and it may take time for the update to be displayed; however, when the user later views the incident/event detail page, the updates have not yet been applied. No errors are displayed in the console.

Environment

Release : 6.5.4

Component : RiskFabric Processing

Cause

The RiskFabric Queue Processing job is extant at the time mitigation/classification occurs due to a previous system or service failure while the job was running that prevented the job from deleting itself upon completion.

Resolution

The RiskFabric Queue Processing job is configured to self-delete on success or failure. To resolve this issue, manually start the job by following this procedure:

1. Open SQL Server Management Studio (SSMS)
2. Connect to the database engine hosting the RiskFabric database
3. In Object Explorer, navigate to SQL Server Agent > Jobs
4. Right-click the job RiskFabric Queue Processing and select Start Job at Step