CONTAP-746362: ONTAP System Manager GUI inconsistency in showing ARW events
Issue
- ONTAP System Manager doesn't consistently show "Review suspected file types" option every time there is an ARW event.
- Sometimes GUI shows Abnormal Volume activity detected on <date-time> but with no file names
- After a while with different navigations and refreshes, sometime "Review suspected file types" option ** appears
- When the option is available, after checking the files and marking them false positive triggers an alert as: "Clearing a suspect by specifying the file format is not supported when an attack is detected by encyption_percentage_analysis" which makes things confusing as then the files should have been never shown
- when multiple ARP alerts are simultaneously active, "choose an action" button acts on All active alerts at once rather than only the selected incident though the GUI says 1 selected
