Bug ID 2257021: DoS Dashboard shows attacks starting but not ending with 1-day or longer timeframe

Last Modified: Apr 23, 2026

Affected Product(s):
BIG-IP AVR(all modules)

Known Affected Versions:
17.1.3, 17.1.3.1

Opened: Mar 23, 2026

Severity: 4-Minor

Symptoms

On TMUI, for timeframes of one day or more, the DoS Dashboard wrongly shows attacks as ongoing because the UI query omits end events, even though the backend tables have correct start and end data.

Impact

Dashboard is not accurate.

Conditions

Run multiple DoS attacks throughout a day.

Workaround

N/A

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips