Video Screencast Help

Query failed - Action list reports

Created: 09 Feb 2014 • Updated: 27 Mar 2014 | 33 comments
ThaveshinP's picture
This issue has been solved. See solution.

When I try to run a report for Action list - I keep getting query failed - either 24hrs , past week or past month. Tried both from console and web access.

Running SEP 12RU3.

Any assistance /ideas?

Comments 33 CommentsJump to latest comment

James007's picture

This issue are fixed in sep 12.1.4

Cannot generate risk report
Fix ID: 3161681
Symptom: When you create a risk report for “Action List” or “Infected and At Risk Computers”, the query fails.
Solution: Fixed an issue with joins in the SQL query
 
Rafeeq's picture

Two things to try

http://www.symantec.com/business/support/index?page=content&id=TECH164854

The sem5 database user lacks EXECUTE permissions to one or more stored procedures. You can use the reporting.log to identify additional stored procedures that are failing due to lack of permissions.

Or

Increase the timeout value

http://www.symantec.com/business/support/index?page=content&id=TECH101746&locale=en_US

 

 
ThaveshinP's picture

We will upgrade to RU4 tomorrow and let you know . Thanks.

ThaveshinP's picture

Upgraded to RU4 and still no report.

James007's picture

If after Upgrade you can't find report i suggest you can raised support ticket.

Rafeeq's picture

Sir , 

You tried these two? Same result?

http://www.symantec.com/business/support/index?page=content&id=TECH164854

The sem5 database user lacks EXECUTE permissions to one or more stored procedures. You can use the reporting.log to identify additional stored procedures that are failing due to lack of permissions.

Or

Increase the timeout value

http://www.symantec.com/business/support/index?page=content&id=TECH101746&locale=en_US

ThaveshinP's picture

Will try it out and let you know.

ThaveshinP's picture

Same result - no report is displayed. 

Prashant Katti's picture

Hi ThaveshinP,

 

I have few questions on your filter:- 

1) Are you using default filter?

2)If it is advanced filter,can you let us know the values for the same?

 

There are few issues which were fixed in RU4.

 

Thanks,

Prashant Katti

 

ThaveshinP's picture

1) Are you using default filter?

 yes

 

 

Prashant Katti's picture

May i have filter screenshot?

 

Regards,

prashant katti

Prashant Katti's picture

Can you send the screen shot of the filter page?Not the query failed error page.
Also upload the reporting log.

ThaveshinP's picture

Attached is reporting.log .

AttachmentSize
reporting.zip 85.81 KB
ThaveshinP's picture

180px_Filter_shot.JPG

Where/Which file is the reporting file located?

Prashant Katti's picture
You would find all the reporting logs at the following location:- 
 
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\logs\reporting.log
 
Regards,
Prashant katti
ThaveshinP's picture

Reporting.log

AttachmentSize
reporting.zip 85.81 KB
Prashant Katti's picture

Currently analysing the log file will get back once we have resolution for this.

 

Rafeeq's picture

Did you increase the time out , see the same error

{main}Error message: <b>Source:</b> Microsoft OLE DB Provider for ODBC Drivers<br/><b>Description:</b> [Microsoft][ODBC SQL Server Driver]Query timeout expired<br>Error code: -2147352567

Did you try this?

 

Error: Query failed when running Comprehensive Risk Report for 24 hours

 

http://www.symantec.com/business/support/index?page=content&id=TECH136691

ThaveshinP's picture

Yes, tried that and still nothing.

ThaveshinP's picture

Does anyone know what the exact stored procedure name/number is for this report? Risks >> Action List?

Prashant Katti's picture

As per the looking at the log file:-

[Microsoft][ODBC SQL Server Driver]Query timeout expired' in D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\Php\Include\Common\ado.php:515

The issue resides in DB configuration settings. Few queries:- 

1) Have you performed any configuration changes with the DB?

2)If yes,can you reconfigure using the DB configuration using "Management Server Configuration Wizard"

 "C:\Windows\System32\cmd.exe /c "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\sca.bat"

 

ThaveshinP's picture

No changes were done on the DB as far as I am aware - spoke to the SQL DBA and nothing was done.

What else?

Prashant Katti's picture

Can you run the re-configure wizard?

 

ThaveshinP's picture

Did that and restarted the DB. same issue

Rafeeq's picture

Thaveshin,

As per this link, echo the sql query.

https://www-secure.symantec.com/connect/articles/extract-sepm-reports-clear-sql-query-step-step-sepm-hack

then try to run that query in SQL, you would know why thats failing..

 

Prashant Katti's picture

After further analysis over the log file and tried executing queries present in the log file,all seems to be working fine.

These are few of primary suspicion:- 

1)Execution files seem to be corrupted(Php\Include\Common\).

2)Take the backup of DB and try repair the SEPM servers or install on different box with same DB backup.

If still it is not resolved try logging a call with support.

 

 

ThaveshinP's picture

Still not working..will have to log a call with support. Thanks for all the help.

James007's picture

Yes it's best bet for you can raised support ticket for more troubleshooting

R_Sran's picture

Yes just raise a new ticket in Symantec Support they will look into deep and resolve your issue.

ThaveshinP's picture

Upgraded to ru4a and now all reports are working albeit a bit slow...thanks to everyone.

SOLUTION