Skip to main content
NetApp Knowledge Base

CONTAP-746362: ONTAP System Manager GUI inconsistency in showing ARW events

Views:
4
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
om
Last Updated:

Issue

  • ONTAP System Manager doesn't consistently show "Review suspected file types" option every time there is an ARW event.
  • Sometimes GUI shows Abnormal Volume activity detected on <date-time> but with no file names
  • After a while with different navigations and refreshes, sometime "Review suspected file types" option ** appears
  • When the option is available, after checking the files and marking them false positive triggers an alert as: "Clearing a suspect by specifying the file format is not supported when an attack is detected by encyption_percentage_analysis" which makes things confusing as then the files should have been never shown
  • when multiple ARP alerts are simultaneously active, "choose an action" button acts on All active alerts at once rather than only the selected incident though the GUI says 1 selected

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.