Incident subscriptions lost in LPSM when SIEM becomes temporarily unreachable
Reference ID: LPSM-88
Date Published: 2026-06-3
Affected Product: LPSM
Affected Version: v2.10.1 and earlier
Status: Under development
Fix Version: v2.11.0
Description:
If you subscribe to individual incident sources (rather than all sources) from a connected SIEM instance, those subscriptions are not restored automatically if the SIEM becomes temporarily unavailable.
When the SIEM is back online, you must manually reconfigure those subscriptions; otherwise, incidents from those sources will not appear, creating a visibility gap for SOC operations.
Note: This issue only affects subscriptions to individually selected incident sources. Subscriptions set to all incident sources from a connected SIEM are not impacted.
Workaround:
After the connected SIEM becomes reachable again, manually re-subscribe to the required individual incident sources for the affected connected SIEM.
Comments
Please sign in to leave a comment.