Endpoint SWAT: Protect the Endpoint Community

 View Only
Expand all | Collapse all

Query failed - Action list reports

pete

peteFeb 10, 2014 12:56 AM

ThaveshinP

ThaveshinPFeb 10, 2014 01:08 AM

ThaveshinP

ThaveshinPFeb 12, 2014 04:34 AM

ThaveshinP

ThaveshinPFeb 12, 2014 06:57 AM

ThaveshinP

ThaveshinPFeb 12, 2014 06:58 AM

ThaveshinP

ThaveshinPFeb 12, 2014 07:08 AM

ThaveshinP

ThaveshinPFeb 13, 2014 02:13 AM

ThaveshinP

ThaveshinPFeb 13, 2014 02:14 AM

ThaveshinP

ThaveshinPFeb 13, 2014 04:13 AM

ThaveshinP

ThaveshinPFeb 13, 2014 05:11 AM

Migration User

Migration UserFeb 13, 2014 06:28 AM

ThaveshinP

ThaveshinPFeb 13, 2014 07:06 AM

  • 1.  Query failed - Action list reports

    Posted Feb 10, 2014 12:55 AM

    When I try to run a report for Action list - I keep getting query failed - either 24hrs , past week or past month. Tried both from console and web access.

    Running SEP 12RU3.

    Any assistance /ideas?



  • 2.  RE: Query failed - Action list reports

    Broadcom Employee
    Posted Feb 10, 2014 12:56 AM

    can you post the screen shot?

     



  • 3.  RE: Query failed - Action list reports

    Posted Feb 10, 2014 01:00 AM

    This issue are fixed in sep 12.1.4

    Cannot generate risk report
    Fix ID: 3161681
    Symptom: When you create a risk report for “Action List” or “Infected and At Risk Computers”, the query fails.
    Solution: Fixed an issue with joins in the SQL query
     


  • 4.  RE: Query failed - Action list reports

    Posted Feb 10, 2014 01:03 AM

    Two things to try

    http://www.symantec.com/business/support/index?page=content&id=TECH164854

    The sem5 database user lacks EXECUTE permissions to one or more stored procedures. You can use the reporting.log to identify additional stored procedures that are failing due to lack of permissions.

    Or

    Increase the timeout value

    http://www.symantec.com/business/support/index?page=content&id=TECH101746&locale=en_US

     

     


  • 5.  RE: Query failed - Action list reports

    Posted Feb 10, 2014 01:08 AM

    120px_Capture.JPG



  • 6.  RE: Query failed - Action list reports

    Posted Feb 10, 2014 04:50 AM

    We will upgrade to RU4 tomorrow and let you know . Thanks.



  • 7.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 04:34 AM

    Upgraded to RU4 and still no report.



  • 8.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 05:07 AM

    If after Upgrade you can't find report i suggest you can raised support ticket.



  • 9.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 05:35 AM

    Sir , 

    You tried these two? Same result?

    http://www.symantec.com/business/support/index?page=content&id=TECH164854

    The sem5 database user lacks EXECUTE permissions to one or more stored procedures. You can use the reporting.log to identify additional stored procedures that are failing due to lack of permissions.

    Or

    Increase the timeout value

    http://www.symantec.com/business/support/index?page=content&id=TECH101746&locale=en_US



  • 10.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 06:46 AM

    Hi ThaveshinP,

     

    I have few questions on your filter:- 

    1) Are you using default filter?

    2)If it is advanced filter,can you let us know the values for the same?

     

    There are few issues which were fixed in RU4.

     

    Thanks,

    Prashant Katti

     



  • 11.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 06:57 AM

    1) Are you using default filter?

     yes

     

     



  • 12.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 06:58 AM

    Will try it out and let you know.



  • 13.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 07:01 AM

    May i have filter screenshot?

     

    Regards,

    prashant katti



  • 14.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 07:08 AM

    Same result - no report is displayed. 



  • 15.  RE: Query failed - Action list reports

    Posted Feb 12, 2014 08:26 AM
    Can you send the screen shot of the filter page?Not the query failed error page. Also upload the reporting log.


  • 16.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 01:32 AM

    180px_Filter_shot.JPG

    Where/Which file is the reporting file located?



  • 17.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 02:13 AM
    You would find all the reporting logs at the following location:- 
     
    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\logs\reporting.log
     
    Regards,
    Prashant katti


  • 18.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 02:13 AM
      |   view attached

    Attached is reporting.log .

    Attachment(s)

    zip
    reporting.zip   85 KB 1 version


  • 19.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 02:14 AM
      |   view attached

    Reporting.log

    Attachment(s)

    zip
    reporting_0.zip   85 KB 1 version


  • 20.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 02:20 AM

    Currently analysing the log file will get back once we have resolution for this.

     



  • 21.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 02:39 AM

    Did you increase the time out , see the same error

    {main}Error message: <b>Source:</b> Microsoft OLE DB Provider for ODBC Drivers<br/><b>Description:</b> [Microsoft][ODBC SQL Server Driver]Query timeout expired<br>Error code: -2147352567

    Did you try this?

     

    Error: Query failed when running Comprehensive Risk Report for 24 hours

     

    http://www.symantec.com/business/support/index?page=content&id=TECH136691



  • 22.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 04:13 AM

    Yes, tried that and still nothing.



  • 23.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 04:15 AM

    Does anyone know what the exact stored procedure name/number is for this report? Risks >> Action List?



  • 24.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 04:28 AM

    As per the looking at the log file:-

    [Microsoft][ODBC SQL Server Driver]Query timeout expired' in D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\Php\Include\Common\ado.php:515

    The issue resides in DB configuration settings. Few queries:- 

    1) Have you performed any configuration changes with the DB?

    2)If yes,can you reconfigure using the DB configuration using "Management Server Configuration Wizard"

     "C:\Windows\System32\cmd.exe /c "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\sca.bat"

     



  • 25.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 04:43 AM

    No changes were done on the DB as far as I am aware - spoke to the SQL DBA and nothing was done.

    What else?



  • 26.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 05:11 AM

    Will do and let you know.



  • 27.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 05:28 AM

    Thaveshin,

    As per this link, echo the sql query.

    https://www-secure.symantec.com/connect/articles/extract-sepm-reports-clear-sql-query-step-step-sepm-hack

    then try to run that query in SQL, you would know why thats failing..

     



  • 28.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 06:28 AM

    Can you run the re-configure wizard?

     



  • 29.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 07:06 AM

    Did that and restarted the DB. same issue



  • 30.  RE: Query failed - Action list reports

    Posted Feb 13, 2014 11:46 AM

    After further analysis over the log file and tried executing queries present in the log file,all seems to be working fine.

    These are few of primary suspicion:- 

    1)Execution files seem to be corrupted(Php\Include\Common\).

    2)Take the backup of DB and try repair the SEPM servers or install on different box with same DB backup.

    If still it is not resolved try logging a call with support.

     

     



  • 31.  RE: Query failed - Action list reports

    Posted Feb 14, 2014 02:30 AM

    Still not working..will have to log a call with support. Thanks for all the help.



  • 32.  RE: Query failed - Action list reports

    Posted Feb 14, 2014 03:11 AM

    Yes it's best bet for you can raised support ticket for more troubleshooting



  • 33.  RE: Query failed - Action list reports

    Posted Mar 27, 2014 04:57 PM

    Yes just raise a new ticket in Symantec Support they will look into deep and resolve your issue.



  • 34.  RE: Query failed - Action list reports
    Best Answer

    Posted Mar 28, 2014 02:10 AM

    Upgraded to ru4a and now all reports are working albeit a bit slow...thanks to everyone.