You are getting the above Error for SCANS, SEM_CONTENT tables from Symantec Endpoint Protection State Event Collector in Symantec Security Information Manager
Typical error message from SEP State Collector (in sybase mode only)
WARN 2011-10-10 13:53:00,097 Collectors.3293.wGroup.[workinggroup0].Sensor.[EARTH2_SEP12_State_Sybase] Thread-116 Problem with query: SQL Anywhere Error -121: Permission denied: you do not have permission to select from "SCANS" (query => [SCANSQuery]
User created for SEP state collector does not have read permission for the tables shown in Error.
Collector documentation Page 15 Step 5 is missing some entries in the list of views to grant permission.
1.On the SEPM server, start the Interactive SQL program. On Windows, this program is named dbisqlc.exe. 2.GRANT SELECT ON "DBA"."SCANS" TO "read_only_user_name" FROM "DBA" 3.Click Execute. If you get error for any other table like "SEM_CONTENT", "SEM_COMPUTER", "SEM_JOB", "LICENSE", "LICENSE_CHAIN" please replace that with SCANS in the above statement and execute
Imported Document ID: TECH131101
Subscribing will provide email updates when this Article is updated. Login is required.