cancel
Showing results for 
Search instead for 
Did you mean: 
izik
Level 7
Report Inappropriate Content
Message 1 of 1

SIEM collector issue with oracle DB

Hi

i upgradethe client to  11.0 and now i have issue with one ORACLE DB , i found the error in the debug file and as far as i understand it not success to query the data , i try to find out why , and run the query from PLSQL and i found out that the collector client add "to_timestamp" function to the query because the bookmark field is date , but the for some reason it add 'T' between  the date and time , and because of that the query failed

this is the error in debug file :

ERROR 1 SQLClient::GetNextRecordData Failed to retrieve next record

this is the select it trying to run:

SELECT SOME_VIEW.A, SOME_VIEW.B, SOME_VIEW.C, SOME_VIEW.D, SOME_VIEW.EVENTDATE, FROM DATABASE.SOME_VIEW WHERE ((EVENTDATE>= to_timestamp('2018-11-13T15:52:49','YYYY-MM-DD HH24:MI:SS.FF'))) order by SOME_VIEW.EVENTDATE

when i try to run this query in PLSQL i'm getting error that this function has to include only numeric

if i remove the 'T' the query is running, 

what can i do to get it work with this client ?

 with collector client in  version 10 it was working fine.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator