User search not working in UBA 2.4.0?
Since I upgraded UBA to 2.4.0, the user search field is not working. It either acts like the magnifying glass button wasn't pressed or it goes to the results screen but it shows that little shape changing icon that means it's "searching" and just remains like that forever. I'm on QRadar 7.2.8 patch 10. Anyone else experiencing this issue?
Does your UBA have a really large number of users? We identified an issue with the auto complete search that can cause it to slow down if you have a very large number of users. We fixed this in the next release (2.5) later this month.
About 50k users. Just to be clear, it's not only the autocomplete that doesn't work. When it goes to the results screen it takes a while and finally shows "Failed to load results". Could this be the issue you identified?
@Matthew Ouellette (IBM) so do you think this issue could be related to the one you found? I have a PMR open but so far no solution has been given
Yes I think it is the issue for sure. We have fixed it in the next release (2.5) which should be posted soon. We are just testing and validating the release and hope to have it posted within the next few weeks.