It has been observed across tenants that the metadata\querySource API is at times giving incorrect "lastSeen" timestamp. For example please find the details of the API below from Prod tenant:
POST /<num>/metadata/querySource HTTP/1.1
Host: apmgw.dxi-na1.saas.broadcom.com
Content-Type: application/json
Authorization: Bearer <token>{
"specifier": {
"op":"REGEX",
"pattern":"SuperDomain.*<domain>.*",
"ignoreCase": true
},
"time": 0,
"range": 15552000000,
"includeLive": true
}The above payload returns correct lastSeen timestamp for most of the app agents.
While the "live" status is accurate in showing true as its value, the lastSeen dates are translated to February 15, 2024 11:23:45 AM and June 6, 2024 9:41:30 AM. Excerpt from the response for these two agents are below:
{"sourceId": "<sourceid>","name": "SuperDomain|...","firstSeen": 1645747294000,"lastSeen": 1722008442265,"live": true},{"sourceId": "<sourceid>","name": "SuperDomain|...","firstSeen": 1645747296000,"lastSeen": 1717666890000,"live": true}
Fix in 24.9.1