- Joined: 3/20/2007
Noise Events Change to Unclassified if Noise Events Aren't Archived
Tuesday, October 11, 2016 1:02 PM
I have an issue that I have reproduced on a number of different GFI EventsManager 2012 installations.
The issue is the following: Noise events are only correctly labeled noise if I have configured the default classification for Noise events to be archived. If I un-select the "Archive Event" checkbox in the default classification for noise events, events that match a noise rule (and so were previously classified as noise) will then be classified as Unclassified from that point forward. If I re-check the "Archive Event" checkbox again, events matching the noise rules will again begin to be classified as noise.
This issue effectively makes it impossible for us to ignore Noise events, causing many more events to be stored in the database than is desired. This decreases performance and causes manual actions (deleting the noise events) to have to be performed on a regular basis.
Has anyone else seen this issue?