Description

The JATP dashboard is showing incidents that occurred on one day and no historical data.

Solution

When you are unable to see historical logs on the JATP dashboard, follow the steps below:

  1. Ensure that the filter on the Dashboard is selected appropriately to display events older than 24 hours. If you still do not see the events older than a day, proceed to Step 2.

  2. Go to the Config tab, then System Settings . Under the Display Settings on this page, you will find a default value of 500. Increase that number to a high value until you see the older logs on the Dashboard. Also, ensure the display period is selected accordingly if you want to view logs older than a month.


By default, only 500 threats are displayed. However, if your appliance is receiving a lot of threats/events per day (more than 500), then you will see only a day's logs. In that case, increasing this value, may help to navigate historical logs. For example, there are 1000 events recorded for 24 hours, then increasing the value to 2000 or more will help you view 48 hours of data.

Note: Increasing this number means the amount of logs the core needs to fetch for displaying increases. Thus, if this limit is raised too high, it can have an impact on the performance of the UI.