Following the earlier question, I discovered that the UBA content pack implements pretty well the watchlist I require, so I installed it and hooked it up.
I then worked my way down the list implementing the UBA watchlists, but I had issues with the Server (name and FQDN) lists. Both connect and pull data correctly, but I can't finish and exit, because I get this error:
I find no documentation for this, and having pulled the list of servers returned I can't see anything obvious. Has anyone else seen this or the ER242 message?
It is 11.0.3, but the comment about 50 items is well wide of the mark. We successfully pulled down a list of 20000+ values related to users - it's specifically an issue with the servers.
We think there may actually be an illegally-named server hiding in the list - something with more than 15 characters in the name.