Absent Member.
Absent Member.
1338 views

Unable to get max record for

We have successfully installed Arcsight flex connector id based for Websense web security. But we unable to start the service and agent.out.wrapper shows

INFO   | jvm 5    | 2012/12/19 15:02:18 | Caused by: java.lang.RuntimeException: Unable to get max record for [jdbc:odbc:websense], cannot continue.

INFO   | jvm 5    | 2012/12/19 15:02:18 |  at com.arcsight.agent.sdk.b.g.g.a(g.java:1111)

INFO   | jvm 5    | 2012/12/19 15:02:18 |  at com.arcsight.agent.sdk.b.g.j.e(j.java:120)

INFO   | jvm 5    | 2012/12/19 15:02:18 |  at com.arcsight.agent.Agent.M(Agent.java:567)

INFO   | jvm 5    | 2012/12/19 15:02:18 |  at com.arcsight.agent.Agent.a(Agent.java:968)

INFO   | jvm 5    | 2012/12/19 15:02:18 |  ... 7 more

INFO   | jvm 5    | 2012/12/19 15:02:18 | [Wed Dec 19 15:02:18 IST 2012] [INFO ] Shutting Down Agent Framework Version [5.1.7.6076.0]

websense.sdkidatabase

version.order=1
maxid.query=SELECT max(incoming.record_number) from incoming

query=SELECT record_number, \
date_time, port, protocols.name as Protocol, category.name +': '+category.child_name as Category,  \
disposition.description as ActionTaken, url, full_url, users.user_login_info as userID, \
dbo.inttoip(source_ip_int) as SrcIP, dbo.inttoip(destination_ip_int)as DstIP, \
dbo.inttoip(source_server_ip_int) as SourceServer, file_types.name as FileType, hits \
FROM incoming \
INNER JOIN category on incoming.category = category.category \
INNER JOIN protocols on incoming.protocol_id = protocols.id \
INNER JOIN disposition on disposition.disposition_code = incoming.disposition_code \
INNER JOIN users on incoming.user_id = users.user_id \
LEFT OUTER JOIN file_types on incoming.file_type_id = file_types.file_type_id \
WHERE record_number > ? ORDER BY record_number


id.field=record_number
uniqueid.fields=record_number

event.flexNumber1Label=__stringConstant("Record Number")
event.deviceProduct=__stringConstant("Triton")
event.deviceVendor=__stringConstant("Websense")
event.flexNumber1=record_number
event.deviceReceiptTime=date_time
event.destinationPort=port
event.fileType=Protocol
event.deviceEventCategory=Category
event.deviceEventClassId=ActionTaken
event.deviceCustomString1=url
event.deviceCustomString1Label=__stringConstant("RequestURL")
event.deviceCustomString2=full_url
event.deviceCustomString2Label=__stringConstant("Request Full URL")
event.sourceUserName=userID
event.sourceAddress=SrcIP
event.destinationAddress=DstIP
event.destinationHostName=url
event.deviceAddress=SourceServer
event.deviceCustomNumber1=hits
event.deviceCustomNumber2=bytes_sent
event.deviceCustomNumber3=bytes_received
event.deviceCustomNumber1Label=__stringConstant("Hit Count")

Please help me to fix this issues.

Labels (4)
0 Likes
1 Reply
Commodore Commodore
Commodore

Did you find solution for these, what are the possible causes.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.