Risk Fabric Processing Job Aborts - Update LDW_Core Step Fails

book

Article ID: 184807

calendar_today

Updated On:

Products

Information Centric Analytics Data Loss Prevention Core Package

Issue/Introduction

Risk Fabric Processing Job Aborts - Update LDW_Core Step Fails

Executed as user: XXXXXX/XXXXX. Warning: Null value is eliminated by an aggregate or other SET operation. [SQLSTATE 01003] (Message 8153) Warning: Null value is eliminated by an aggregate or other SET operation. [SQLSTATE 01003] (Message 8153) Warning: Null value is eliminated by an aggregate or other SET operation. [SQLSTATE 01003] (Message 8153) Warning: Null value is eliminated by an aggregate or other SET operation. [SQLSTATE 01003] (Message 8153) Warning: Null value is eliminated by an aggregate or other SET operation. [SQLSTATE 01003] (Message 8153) Warning: Null value is eliminated by an aggregate or other SET operation. [SQLSTATE 01003] (Message 8153) Operating System Update Count: 544 [SQLSTATE 01000] (Message 0) Comparing with snapshot table [SQLSTATE 01000] (Message 0) Comparing with snapshot table [SQLSTATE 01000] (Message 0) @ExecuteTableName = [SQLSTATE 01000] (Message 0) No exceptions found for appropriate type/input [SQLSTATE 01000] (Message 0) Caution: Changing any part of an object name could break scripts and stored procedures. [SQLSTATE 01000] (Message 15477) Caution: Changing any part of an object name could break scripts and stored procedures. [SQLSTATE 01000] (Message 15477) Caution: Changing any part of an object name could break scripts and stored procedures. [SQLSTATE 01000] (Message 15477) Warning! The maximum key length for a clustered index is 900 bytes. The index 'CLIX_#tempEventProtectionTechnology' has maximum length of 1024 bytes. For some combination of large values, the insert/update operation will fail. [SQLSTATE 01000] (Message 1945) | spUpdateDIMIncidentClassificationMitigationFromStatus failed. Error Message: Cannot insert the value NULL into column 'IsEventMitigated', table 'RiskFabric.dbo.LDW_DIMIncidents'; column does not allow nulls. UPDATE fails. [SQLSTATE 42000] (Error 50000) Caution: Changing any part of an object name could break scripts and stored procedures. [SQLSTATE 01000] (Error 15477) Caution: Changing any part of an object name could break scripts and stored procedures. [SQLSTATE 01000] (Error 15477) Caution: Changing any part of an object name could break scripts and stored procedures. [SQLSTATE 01000] (Error 15477) Caution: Changing any part of an object name could break scripts and stored procedures. [SQLSTATE 01000] (Error 15477) Job 'RiskFabric_ProcessNormality_TimeOfDay' started successfully. [SQLSTATE 01000] (Error 14243) Job 'RiskFabric_ProcessNormality_GeoLocation' started successfully. [SQLSTATE 01000] (Error 14243) Job 'RiskFabric_ProcessNormality_DIMIncidents' started successfully. [SQLSTATE 01000] (Error 14243) Job 'RiskFabric_ProcessNormality_AuthenticationEvents' started successfully. [SQLSTATE 01000] (Error 14243) Job 'RiskFabric_ProcessNormality_WebActivity' started successfully. [SQLSTATE 01000] (Error 14243) Job 'RiskFabric_ProcessNormality_EPEvents' started successfully. [SQLSTATE 01000] (Error 14243) Job 'RiskFabric - Rebuild Indexes 0EE2854B5BFE45D6BBE6B7539ECEC883' started successfully. [SQLSTATE 01000] (Error 14243) Job 'RiskFabric Update Statistics on All Tables 1' started successfully. [SQLSTATE 01000] (Error 14243). The step failed.

Cause

The classification and mitigation were being set  by a single stored proc.

Environment

ICA 6.5.2.2

Resolution

Revised the procedure to allow for classification while leaving the incident in an unmitigated state.