Command Line Query Tool in Symantec Critical System Protection (SCSP) Produces Blank Report or Query

Products

• Critical System Protection

Issue/Introduction

When you use the Command Line Query Tool (scspquery.bat or sdcssquery.bat) in SCSP, the reports or queries contain no data when they are run. With reports, you see proper formatting and borders, but there is no data.

Symptoms
Blank reports and queries

 

Cause

This is caused by incorrect permissions for the user that is trying to process the report/query via the command line. By default, the "Query Tool Users" role does not have data read permissions for assets. The "Query Tool Users" role is what the command line function runs under.

Resolution

Here are two solutions to this issue:

• Give the user that is running the command line query both "Query Tool Users" role and "Guest" role. The guest role has the correct permissions by default, which allow the report to be generated.

 

• By default, the "Query Tool Users" role in CSP does have access to queries and reports, however, this role does NOT have access to the actual agents.
  Right click on the folder that holds the agents, select properties, and look under the security tab. Add the "Query Tool Users" to allow access to these agents.