Unable to index file name, file extension and file type in Security Analytics

Products

• Security Analytics
• Security Analytics - VA

Issue/Introduction

The Security Analytics rules are not being triggered when criteria for file name, file extension or file type is being met.  

Environment

Security Analytics version 8.2.7 and earlier.

Cause

This is caused by a limitation with HTTP version 2 traffic and the classification engine that Security Analytics uses.  HTTP version 1 traffic is indexed just fine and does not have this problem.

Resolution

This is fixed in Security Analytics version 8.2.8.