I want to send data in SQL database via mcafee siem collector.
4. Added Data Source in SIEM
But Mcafee SIEM Collector (debug.log) said that - No Records to process.
When selecting the event forwarding method in the SQL plugin, when you choose MEF you already map database fields to ESM fields. This means that no parsing will need to be done as it is already done by the sql plugin on the agent. In your data source configuration, select MEF as data format.
For the bookmark field, I suggest following hok's advise. Also, check the bookmark file. it could be that all records have already been processed but were not parsed by the receiver because of the misconfiguration in format. Delete the bookmark file or modify the record and restart the siem collector agent.