ProTip for SIEM: Session Timeout Error Due to Inactivity While Using ESM
While using the Enterprise Security Manager user interface, users may occasionally see the following message:
Your session has timed out due to inactivity (ER1111)
This message appears randomly, even though you are actively working in the ESM and are not inactive.
This can be caused by various connectivity issues but is typically seen when the computer or laptop that you are using to configure the ESM has simultaneous wired and non-wired (WI-FI/cellular) connections, or uses a VPN. In these scenarios, if the connection changes mid-session and your computer is assigned a different IP address (for example, if your computer disconnects from WI-FI and reconnects via the wired connection), the ESM will log you out by design.