No details in Threat Prevention Logs

[JiaHaoC]

Noticed some TP logs within a customer's environment that seems strange. Reported as High severity and 1 suppressed logs, but does not contain any information about what the traffic was. Looking for some help in understanding these logs.

[the_rock]

This happens only with some logs? If so, when did you notice it?

[JiaHaoC]

Yes we have only identified some logs that are like this. Isolated to one day, hasn't occurred since.

[PhoneBoy]

I would consult with the TAC to be certain.
However, I don't believe actual traffic was blocked as a result of these logs.

[Chris_Atkinson]

Which version & JHF is the environment deployed with anything particularly unique about the setup?

[JiaHaoC]

For context, the logs occurred few hours after MDS upgrade from JHF66 to JHF79. The environment was running

MDS - R81.10 JHF79

VSX Cluster - 2 production VS - R81.10 JHF66

The environment has since been upgraded fully to JHF79