No Data in CloudSOC Investigate with three months selected

Products

• CASB Advanced Threat Protection
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS

Issue/Introduction

SysAdmin using Google Chrome. "No Data" issue started from one day to the next.

One day prior there was three months of O365 Activities / Events in Investigate:

Monitoring Dashboard shows O365 Securlet Connected / Green / No issues

O365 Securlet has been activated for at least one year.

Cause

Client's Windows 10 PC was receiving numerous patches, updates, not only Windows Security updates

PC was excessively slow logging in to CloudSOC taking up to a minute, loading any screens, navigating between Apps, opening anything

Resolution

Test login using CloudSOC Support Account to same CloudSOC tenant revealed that it took less than 5 seconds to login, load Investigate data, and it was all there.

Client installed all pending updates, patches, rebooted several times, cleared out Google Chrome cookies, cache, sites - Advanced selecting "All time"

Then client reported now able to see last three months of events/activities again in CloudSOC Investigate.