Select an aggregated event with multiple counts, right
click on
the count column, left click on "view correlated
events". In the report
that pops up, select one of the events, right click on
the status
column, left click on "expire event". In the realtime
tab, the original
count is still the same, which is incorrect. When
subsequent reports
are done on that aggregated event, it will pop up an
error message saying:
Error: can't read "eventArray(<expired event ID>)": no
such element in array
The fix probably involves sending a delete event
command to all the clients for these events, but
figuring out which are even relevant (those in the
realtime window versus already categorized alarms)
might get a little sticky.
Logged In: YES
user_id=688905
Fix committed, leaving open pending testing for potential
performance impact.
Logged In: YES
user_id=688905
WHoops, marked the wrong bug. This one isn't fixed.
as you were