IT Analytics for DLP 3.0 - datediff overflow Error

Products

• IT Analytics

Issue/Introduction

While processing cubes from the IT Analytics for Data Loss Prevention v3.0 report pack , the following error is encountered...

Errors in the high-level relational engine. The following exception occurred while the managed IDataReader interface was being used: The datediff function resulted in an overflow. The number of dateparts separating two date/time instances is too large. Try to use datediff with a less precise datepart.. Errors in the OLAP storage engine: An error occurred while processing the 'Scan Fact' partition of the 'Scans' measure group for the 'DLP Discover Scans' cube from the IT Analytics3 database

Cause

This issue occurs when processing the DLP Discover Scans cube and manifests itself if there is a scan that has been running for longer than 24 days. As a result, the datediff function used in the shipping code returns a value too large and as a result throws an error.

Resolution

Run the attached script by following the procedures below:

 

1.   Open SQL Server Management Studio.

2.   Connect to your SQL Server hosting the Symantec_CMDB database.

 

Caution: Make a backup of the existing spITAnalytics_DLP_CreateViews stored procedure before continuing. You can do this by right clicking the script and selecting Script Stored Procedure as | Alter To | File.

 

3.   Open the above SQL file in a SQL Query window.

4.   Modify the first line in the file to reflect the name of your Symantec_CMDB database if you have renamed it.

5.   Click the execute button in the toolbar to execute the script. This modifies the existing spITAnalytics_DLP_CreateViews script.

6.   Locate the modified script under Symantec_CMDB | Programmability |Stored Procedures.

7.   Right click and select Execute Stored Procedure.

8.   Click Okay. The script should execute and return a ‘0’ return code.

 

Applies To

IT Analytics v7.1 SP2

IT Analytics for Data Loss Prevention 3.0

Important Note: This fix is only applicable to IT Analytics for DLP v3.0.1 Applying this fix to an ITA for DLP 2.0 environment or versions later than 3.01 will cause a number of problems that will result in the need to uninstall and reinstall in order to resolve.

If it becomes necessary to remove and reinstall the IT Analytics for DLP Pack for any reason, this fix should be re-applied. If a newer version is installed or an upgrade beyond v3.0.1 is installed, DO NOT APPLY this fix.