Artifact Utilization test is failing in Security Analytics

Products

• Security Analytics

Issue/Introduction

In certain situations, the Artifact Utilization test may fail once you upgrade to Security Analytics 8.3.1.  

Cause

Not enough memory was being allocated to extraction in 8.3.1 build 56455.  

Pending artifacts exist for the purpose of giving a recognizable name to an artifact.  They link the artifact information to the session information.  This has two implications.  First, artifacts are not being missed as a consequence of this issue.  The names just may not be as useful.

Resolution

This has been resolved with 8.3.1 NSR-1.  You can find the NSR patch under "My Downloads" on the support portal under Security Analytics 8.3.1.  It is possible that even after applying NSR-1, some tweaks might still be needed depending on your exact traffic patterns.  If that is the case, contact technical support for further assistance.  

NOTE:  You are not missing any artifacts as a consequence of this issue.  Artifacts are still being processed.  This may be addressed a bit further in a future release of Security Analytics.