How to remediate issues with saved queries after upgrading to Cayosoft Guardian 5.2.2

After upgrading to Cayosoft Guardian v5.2.2, users may encounter issues with saved queries and alerting rules not functioning as expected when having saved queries with conditions and Advanced filters applied simultaneously. This article provides steps for troubleshooting these issues.

NOTE: If you have not yet upgraded to Cayosoft Guardian 5.2.2, it is recommended to delay the upgrade until a hotfix is released. This will prevent potential disruptions caused by the issues mentioned above.

The following are the known issues:

• Custom saved queries (that have contained the advanced filter and any other filter before the upgrade) have lost some of their conditions. As a result, saved queries might return additional unexpected change history records. Refer to the following articles for additional information: Change Monitoring: Built-in and custom queries.
• As alerting rules use saved queries, you might get additional unexpected alerts.
• As alerting rules with the automatic rollback enabled use saved queries, Cayosoft Guardian might roll back some changes you may not want to roll back.
• As report jobs use saved queries, you might get additional unexpected records in your reports.

Refer to the following steps to remediate issues with saved queries after upgrading:

1. Check Custom Saved queries.
2. Open the Cayosoft Guardian web portal.
3. Expand the Change Monitoring node.

4. Click the Change History node.

   

5. Open your saved queries by clicking the filter.

   

6. Click the Built-in column tab and sort the values by ascending. This will make it easier for you to see all custom queries.

   

7. Select your custom query, e.g., a custom saved query called VMExploit.

   

8. Click Select.

9. Open every filter (What, Properties, Who, Where, and Advanced) in the selected saved query to ensure all specified conditions are correct.

   

10. If the saved query no longer functions as expected, make any necessary adjustments to the query.
11. Go through all custom saved queries to ensure they function correctly.
12. Contact Cayosoft support if you need any assistance with queries.