Bug ID 676418: FPS: Transform rules on existing alerts failed with status: 400 error

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IQ Fraud Protection Service (FPS)(all modules)

Fixed In:
5.4.0

Opened: Aug 01, 2017
Severity: 3-Major

Symptoms

Applying a transform rule to an existing alert fails with the following error: Alert modify task failed status:400, showing" failed to parse date field".

Impact

Transform rules not applied as required.

Conditions

This happens when using timeframe (Last Hour, Last Day, Last Week) on specific timezones.

Workaround

To work around this, change the client machine’s timezone (laptop, computer, not the actual BIG-IQ timezone) and use the UI to issue apply transform rules. The timezone has to be any time zone from UTC-1 to UTC-12. Changing the timezone will give you the ability to execute the apply operation from the BIG-IQ user interface.

Fix Information

BIG-IQ can now handle date formats and properly apply transform rules.

Behavior Change