Reporting Group

 View Only

  • 1.  Network Threat Protection Logs: Attacks

    Posted Mar 11, 2013 02:36 PM

    Hi All,

    I got error message below while accessing the SEPM console.

    QUERY FAILED:

    This query could not be processed for one of the following reasons:

    1. The database query timed out. Try reducing the number of filters, or increasing the SQL Server query timeout value.

    2. An unexpected error occurred. Try running the query again by using default filter values.

    3. String encoding was possibly not UTF-8, and may result from copying and pasting data instead of typing data. Try typing data in the input fields.
     
    Please share best practice docuement.
     
    Regards
    Harvansh Singh


  • 2.  RE: Network Threat Protection Logs: Attacks

    Posted Mar 11, 2013 02:41 PM

    Are you applying filters to it?

    How many clients do you have reporting in to the SEPM. A large amount could be taking a long time for the query to run, causing the timeout. What happens if you use the default filter?

    Is this an SQL or embedded DB? What version of SEPM?



  • 3.  RE: Network Threat Protection Logs: Attacks

    Posted Mar 11, 2013 05:36 PM

    This may be a permission issue as per this KB: http://www.symantec.com/docs/TECH164854

    ...or try simplyrunning the upgrade.bat from c:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\bin + repair of SEPM from control Panel.

     

    You can have a look at some of the following threads as well:

    https://www-secure.symantec.com/connect/pt-br/forums/query-failed

    https://www-secure.symantec.com/connect/forums/query-failed-error-message-while-accessing-sepm-console

    https://www-secure.symantec.com/connect/forums/sep-console-query-failed

    https://www-secure.symantec.com/connect/forums/sep11-query-failed-when-exporting-result-monitorslogrisk



  • 4.  RE: Network Threat Protection Logs: Attacks

    Trusted Advisor
    Posted Mar 11, 2013 06:04 PM

    Hello,

    What version of SEPM are you running?

    Basically this happens that for some reason when the database is not upgraded during the migration from a previous version . In that case go to

    \Program Files\Symantec\Symantec Endpoint Protection Manager\bin  (substitute Program Files (x86) in this path if working on a 64 bit system ) and run upgrade.bat then repair the SEP  manager installation through Control Panel - Add / Remove programs

    Secondly, check this Article:

    Query Failed returned on Home page in SEPM console after a successful migration from 11.0.6 to SEP 12.1

    http://www.symantec.com/business/support/index?page=content&id=TECH164854

    Hope this works for you!!



  • 5.  RE: Network Threat Protection Logs: Attacks

    Posted Mar 12, 2013 01:13 AM

    if you are using SQL DB check this document

     

    http://www.symantec.com/business/support/index?page=content&id=TECH173752
     


  • 6.  RE: Network Threat Protection Logs: Attacks

    Posted Mar 12, 2013 05:46 AM

    Hi Harvansh Singh,

    Chances are the query is trying to pull a huge amount of data from the database and process it.  Are you generating a report of all network attacks across the entire organization?  Try to use advanced filtes to see if attacks against just one client group for a limited time (maybe "past day") succeeds. 

    Please do keep this thread up to date with your progress!

    Mick