Data Center Security

 View Only

  • 1.  An error was encountered while attempting to execute the database query

    Posted Nov 25, 2024 02:17 AM

    Dear experts,

    I need some help on the following situation

    After migrated the database to another server, the Event data such as last 500, Total event, 1 hour or 12 hours ago is no longer visible. An error occurs while clicking the Last 500 events.

    Error: An error was encountered while attempting to execute the database query

    After reviewing the sis-resapi-0.log I found the error message below

    ***********************

    99810 2024-11-21 13:36:56.502 [WARN ] [EventController:112] An error was encountered while attempting to execute the database query

    com.symantec.sis.server.exception.ServerException: [107] An error was encountered while attempting to execute the database query

    {

           "Sql": "SELECT (SELECT COUNT(event_id) FROM CSPEVENT_VW WITH(NOLOCK) WHERE ((event_dt_day_of_yr >= 662 AND event_dt_day_of_yr <= 692) AND (asset_rid = ? AND agentname = ?))) AS totalCountFullQuery, sq.* FROM ( SELECT ROW_NUMBER() OVER(ORDER BY event_dt_day_of_yr DESC, event_Dt DESC) AS rownumber, module, EVENT_ID, hostname, description, localport, contact_name, process_id, osversion, event_type, localaddr, VCENTER_VERSION AS vcenterVersion, NSX_VERSION AS nsxVersion, ostype, session_id, remoteport, resource_name, binarydata, event_severity, system_state_d, rule_name, event_seq, post_dt, ostype_d, post_delay, event_Dt, sva_vm_name, event_priority, sva_ip_address, disposition_d, event_remediated, event_duration, bia, system_state, policyrid, event_cnt, sva_moid, rule_id, containername, guest_id_2, process_efa_pub, target_efa_flag, process_name, operation_d, otherinfo, agent_version, event_category, agenttype_d, event_source_d, event_source, guest_vm_ip AS guest_ip, untag_action, event_mode, guest_id_1, target_info, process_path, guest_id_3, tag_action, process_efa_flag, module_efa_flag, module_efa_pub, module_efa_sha256, user_text, pproc_efa_pub, target_efa_sha256, value13, pproc_efa_sha256, value6, value23, value24, value4, value11, pproc_efa_flag, value12, value17, value19, value25, value16, value21, irule_name, value10, value15, value3, value8, value22, value14, value20, value5, value1, target_efa_pub, erule_name, value18, value7, value9, pset, custom_value3, res_type, custom_value2, custom_value5, event_subtype, localip, pset_global, bop_opdesc, res_list, value26, bop_opcode, res_access2, res_access, custom_value1, custom_value4, intval1, intval2, altp_module, remoteip, VCENTER_IP AS vcenterIp, domain_name, user_name, agentname, timezone_adj AS timezoneadj, collectorname, disposition, policy_name, sva_version, NSX_IP AS nsxIpaddress, hostaddr, operation, asset_rid, value2, event_type_d, event_severity_d, asset_collectorRid, module_efa_flag_d, target_efa_flag_d, pproc_efa_flag_d, event_category_d, process_efa_flag_d, process_efa_sha256  FROM CSPEVENT_VW WITH(NOLOCK) WHERE ((event_dt_day_of_yr >= 662 AND event_dt_day_of_yr <= 692) AND (asset_rid = ? AND agentname = ?)) ) AS sq  WHERE rownumber BETWEEN 1 AND 100 ORDER BY rownumber  OPTION (MAXDOP 0) {5307, 'DCS_Manager FQDN', 5307, 'DCS_Manager FQDN'}"

           "SQL Code": 207

    }

           at net.sourceforge.jtds.jdbc.SQLDiagnostic.addDiagnostic(SQLDiagnostic.java:372)

           at net.sourceforge.jtds.jdbc.TdsCore.tdsErrorToken(TdsCore.java:2893)

           at net.sourceforge.jtds.jdbc.TdsCore.nextToken(TdsCore.java:2335)

           at net.sourceforge.jtds.jdbc.TdsCore.getMoreResults(TdsCore.java:638)

           at net.sourceforge.jtds.jdbc.JtdsStatement.processResults(JtdsStatement.java:613)

           at net.sourceforge.jtds.jdbc.JtdsStatement.executeSQL(JtdsStatement.java:572)

           at net.sourceforge.jtds.jdbc.JtdsPreparedStatement.execute(JtdsPreparedStatement.java:784)

           at jdk.internal.reflect.GeneratedMethodAccessor93.invoke(Unknown Source)

           at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

           at java.base/java.lang.reflect.Method.invoke(Unknown Source)

           at org.apache.tomcat.jdbc.pool.StatementFacade$StatementProxy.invoke(StatementFacade.java:118)

           at com.sun.proxy.$Proxy53.execute(Unknown Source)

           at com.symantec.sis.server.datastore.DBSession.find(DBSession.java:172)

           at com.symantec.sis.server.datastore.ResultList.handleHydrate(ResultList.java:156)

           at com.symantec.sis.server.datastore.ResultList.hydrate(ResultList.java:133)

           at com.symantec.sis.server.datastore.ResultList.size(ResultList.java:277)

           at com.symantec.sis.server.restapi.controller.AbstractController.createJsonResponse(AbstractController.java:137)

           at com.symantec.dcs.server.event.controller.EventController.getAllEvents(EventController.java:79)

           at jdk.internal.reflect.GeneratedMethodAccessor618.invoke(Unknown Source)

           at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

           at java.base/java.lang.reflect.Method.invoke(Unknown Source)

           at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205)

           at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:150)

           at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:117)

           at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:895)

           at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:808)

           at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87)

           at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1071)

           at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:964)

           at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1006)

           at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:898)

           at javax.servlet.http.HttpServlet.service(HttpServlet.java:655)

           at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:883)

           at javax.servlet.http.HttpServlet.service(HttpServlet.java:764)

           at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:227)

           at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)

           at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)

           at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189)

           at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)

           at com.symantec.dcsc.umc.controller.filter.TokenAuthenticationRequestProcessingStrategy.process(TokenAuthenticationRequestProcessingStrategy.java:128)

           at com.symantec.dcsc.umc.controller.filter.AbstractUMCFilter.doFilter(AbstractUMCFilter.java:107)

           at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189)

           at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)

           at com.symantec.sis.server.restapi.servlet.UMCSettingsFilter.doFilter(UMCSettingsFilter.java:45)

           at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189)

           at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)

           at com.symantec.sis.server.restapi.servlet.SecurityHeadersFilter.doFilter(SecurityHeadersFilter.java:34)

           at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189)

           at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)

           at org.apache.catalina.filters.CorsFilter.handleSimpleCORS(CorsFilter.java:264)

           at org.apache.catalina.filters.CorsFilter.doFilter(CorsFilter.java:168)

           at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189)

           at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)

           at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)

           at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)

           at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189)

           at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)

           at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:197)

           at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:97)

           at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:541)

           at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:135)

           at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)

           at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:78)

           at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:360)

           at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:399)

           at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)

           at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:890)

           at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1789)

           at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)

           at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)

           at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)

           at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

           at java.base/java.lang.Thread.run(Unknown Source)

    Caused by: java.sql.SQLException: 無效的資料行名稱 'event_dt_day_of_yr'

           ... 73 more

    ***********************

    Translate to English

    Caused by: java.sql.SQLException: 無效的資料行名稱 'event_dt_day_of_yr'

    Caused by: java.sql.SQLException: Invalid data row name 'event_dt_day_of_yr'

    Does it mean the 'event_dt_day_of_yr' is missing?



  • 2.  RE: An error was encountered while attempting to execute the database query

    Posted Dec 10, 2024 09:40 AM

    We are also encountering this issue, but we still cannot find the cause......