The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
SmartEvent report shows a user who was not included in the filter
SmartEvent / Eventia Analyzer
When the SmartEvent report is filtered for specific users, the report shows a user who was not included in the filter. (Note: Identity Awareness is enabled on the Security Gateway).
There are logs in which the User Field contains multiple users. (If the SmartEvent server is on R80 or higher, verify this by double-clicking on the user who should not be in the report. The logs shown should contain multiple users.)