cancel
Showing results for 
Search instead for 
Did you mean: 

Duplicated query after install extensions

Jump to solution

Hi,

I have a question,

I just install a new ePO 4.5 installation and after install the extension I notice the following...


Some querys (VSE querys) are dupliated and at the end of the name says .VIRUSCANREPORTS

I attach a image.

Thanks in advanced,

Regards

1 Solution

Accepted Solutions
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 4

Re: Duplicated query after install extensions

Jump to solution

I've just done a bit of playing with this.

Firstly, there's a couple of scenarios where this is expected:

1) If you modify one of the default queries, but don't change its name, then a new query will be created (as you don't want ePO to overwrite your modified query and set it back to default.)

2) If the extension is removed, and then checked back in (or a new version is checked in) then this will happen: removing the extension doesn’t remove the queries, and the new checkin will create duplicates.

That said, it looks like there's a bug in the patch 3 (1.1.0.149) viruscanreports extension. It appears not to contain the correct information for thefollowing queries:

VSE: Current Dat Adoption

VSE: Number Of Detections By Tag

VSE: Top 10 Buffer Overflows Detected

This means that if you check this extension in over the previous version, even if you haven't modified these queries, the extension doesn’t recognise them and so creates a duplicate.

If you haven't already done so, please open a case with Support so we can get this addressed.

Thanks -

Joe

3 Replies

Re: Duplicated query after install extensions

Jump to solution

I just thought I'd let you know we've seen the exact same behavior.

Andrew

McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 4

Re: Duplicated query after install extensions

Jump to solution

I've just done a bit of playing with this.

Firstly, there's a couple of scenarios where this is expected:

1) If you modify one of the default queries, but don't change its name, then a new query will be created (as you don't want ePO to overwrite your modified query and set it back to default.)

2) If the extension is removed, and then checked back in (or a new version is checked in) then this will happen: removing the extension doesn’t remove the queries, and the new checkin will create duplicates.

That said, it looks like there's a bug in the patch 3 (1.1.0.149) viruscanreports extension. It appears not to contain the correct information for thefollowing queries:

VSE: Current Dat Adoption

VSE: Number Of Detections By Tag

VSE: Top 10 Buffer Overflows Detected

This means that if you check this extension in over the previous version, even if you haven't modified these queries, the extension doesn’t recognise them and so creates a duplicate.

If you haven't already done so, please open a case with Support so we can get this addressed.

Thanks -

Joe

Re: Duplicated query after install extensions

Jump to solution

Thanks Joe,

I will create a SR to this, and wait for the solution to this particular issue.

Thanks in advanced.