For 10.x versions:

1. Open the Receiver Properties, and click Events Flows and Logs.
2. Set the Last Downloaded String Record back to 2010.
3. Click Apply, OK.

Get events for the Receiver now displays the correct information.

NOTE: From SIEM 11.0 onward, there's no longer a last downloaded string record entry in the user interface. As the ESM doesn't download records from the receivers, it consumes them from the databus.

For 11.0–11.1.3:

The above versions are in EOL. We strongly recommend that you upgrade to the latest available version. If you're unable to upgrade, contact Technical Support for assistance with republishing the older strings to the databus.

For 11.2.0 and later:

1. SSH to the receiver. If the missing data is coming from more than one receiver, repeat these steps for each receiver.
2. Run SetLogManager SetProductionBookmark stringmaps 1.
3. Run SetLogManager PushNow all.

Allow the receiver to publish all string records to the bus, and for the ESMs to consume the string records. This process typically takes one hour.

NOTE:  11.2.x and 11.3.x are in EOL. We strongly recommend that you upgrade to the latest available version.