Events dashboards are not updated by the intraday job

Products

• Information Centric Analytics
• Data Loss Prevention Core Package

Issue/Introduction

Dashboards for Authentication (AE), Web Activity (WA), and Endpoint (EP) events are not updated throughout the day even though the RiskFabric Intraday Processing job is enabled and running successfully.

Environment

Release : 6.x

Component : RiskFabric Intraday Processing

Cause

For performance reasons, the RiskFabric Intraday Processing job only updates Data In Motion (DIM) events data. All other event types (referred to collectively as Unified Events, or UE) are processed by the RiskFabric Processing job, which is scheduled to run once every 24 hours.

Resolution

The product is working as designed. The intraday job can be customized to process UE events, but this requires the assistance of consulting services.