Bug ID 981785: Incorrect incident severity in Event Correlation statistics

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
16.1.0, 16.0.1.2, 15.1.4, 14.1.4.3

Opened: Jan 13, 2021

Severity: 3-Major

Symptoms

When reported to AVR, incident severity reads "correlation" instead of "high" or "medium".

Impact

Incorrect statistics in Event Correlation summary (Incident Severity graph), and also in tmsh analytics report.

Conditions

Usually happens for the first incident after ASM startup.

Workaround

Use severity info from the Incidents list.

Fix Information

Event Correlation engine was fixed and now incident severity is reported properly to AVR.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips