Inconsistent results between CMC and sensor for "Legacy Oldest Meta"

Products

• Security Analytics

Issue/Introduction

The timestamps returned by the UI are cached for up to 24 hours.  Retrieving this information from the system is very resource intense and cannot be done often without impacting the capture rate and report response times.  As such, there may be inconsistencies between what the Central Manager shows for "Legacy Oldest Meta" and what the actual sensor shows when directly connected to it.

 

Environment

Security Analytics version 8.3.1

Cause

The difference is due to optimization of algorithms to improve overall performance for the application

Resolution

The "Legacy Oldest Meta" will synchronize after the upgraded system has been operating for 24 hours.

In this case, the sensor and the CMC had cached different times.  Within 24 hours, the caches were updated and synchronized.