SEPM Collector & 'write' permissions to DB?

[LARRY NAIL]

Can someone help me understand why the SEPM Collector needs Write access to the database.

This is per:  https://help.symantec.com/cs/ICDX_1.3.1/ICDX/v127077151_v133313422/Adding-Symantec-Endpoint-Protection-Manager-collectors?locale=EN_US

User Name:  The Symantec Endpoint Protection Manager database user requires read-write access to the ALERTS table and read-only access to all other database tables.

ICDx Version 1.4.1-694
Schema Version 1.0.0-547

Larry

------------------------------
Texas Instruments Incorporated
------------------------------

[rroupski]

Hi Larry,
the SEPM collectors needs write access to create an index:

CREATE INDEX I_ALERTS_TIMESTAMP_BRIDGEIDX ON ALERTS (TIME_STAMP) WITH (ALLOW_ROW_LOCKS = OFF, ALLOW_PAGE_LOCKS = OFF) ON FG_INDEX

After the index gets created it will not need write access any more.
Roumen

------------------------------
Roumen
SED, Broadcom
------------------------------

[LARRY NAIL]

So if we create the index, it'll proceed without the rights?

------------------------------
Texas Instruments Incorporated
------------------------------

[rroupski]

Yes, that's correct. The code checks for the I_ALERTS_TIMESTAMP_BRIDGEIDX index and it will not try to create it again.

------------------------------
Roumen
SED, Broadcom
------------------------------

[LARRY NAIL]

Awesome, thanks

 

---

Larry Nail  ______________________________

Member, Group Technical Staff

Cyber Defense Operations Architect

Texas Instruments Incorporated

Voice: +1.214.509.8044

Timezone: CDT (UTC -5) / CST (UTC -6)