Client sets date/time under CASB User Profile but "Custom" appears in Investigate

Products

• CASB Securlet SAAS
• CASB Gateway
• CASB Gateway Advanced
• CASB Security Advanced
• CASB Security Premium
• CASB Security Premium
• CASB Security Standard

Issue/Introduction

When User sets a default time frame under his CASB User Profile the system automatically reverts to "Custom" date / time range in Investigate

Also, if User selects a specific date / time range such as 1 Day, then adds a filter in Investigate, the date / time again reverts back to "Custom"

Resolution

Workaround provided is to delete the value for the key "activities_date_range" in browser local storage

• Open browser / Click F12 to bring up Developer Tools
• Click on Storage / Local Storage
• Find https://app.elastica.net or https://app.eu.elastica.net
• Scroll down and find the key "activities_date_range"
• Edit this one key and remove any date / time range value that exists - (such as [2022-11-30T06..... shown in example below)
• Exit browser Developer mode
• Test and now "Custom" should no longer appear by default in Investigate
  
  

 

 

Additional Information

Browser Local storage: app.elastica.net : "activities_date_range" Key value may be retained in browsers for some Users from a deprecated Detect UI version.

It does not affect all CloudSOC Admins / SysAdmins - only those that had used an earlier Detect version and clicked links from Detect into Investigate

Note: Patch is being developed by UI Team -  ETA CloudSOC 3.160 release - 06 Jul 2023