Error: "Processing Partition 'EP Agent Behavior Event Fact' failed."

book

Article ID: 196872

calendar_today

Updated On:

Products

IT Analytics

Issue/Introduction

Processing the cube SEP Agent Behavior Events fails while processing the Agent Behavior Event Fact partition of the Agent Behavior Events measure group.

Cause

This error is caused by the string length of a description value for an endpoint in the Symantec Endpoint Protection (SEP) data source exceeding 256 characters. The dimension expects a string value of 256 characters or less.

Environment

IT Analytics for SEP 2.9.0

Resolution

This issue is resolved by altering the IT Analytics database view vITAnalytics_SEP_AgentBehaviorEventFact to truncate description values that exceed 256 characters in length.

To make this change, follow this procedure:

  1. Open SQL Server Management Studio (SSMS)
  2. In the Connect to Server window, select the Server type 'Database Engine' and provide the name or IP address of your IT Analytics database host (and instance name, if not the default instance) as the Server name
  3. Connect using the Authentication method enabled during the installation of IT Analytics
  4. Expand the Databases folder under the host name in the Object Explorer pane
  5. Locate and expand the IT Analytics database (the default name is 'ITAnalytics')
  6. Expand the Views folder
  7. Locate the view dbo.vITAnalytics_SEP_AgentBehaviorEventFact
  8. Right-click this view, select Script View as : ALTER To : New Query Editor Window
  9. In the query editor window, edit line 100 by replacing this:
    , DESCRIPTION
    with this:
    , CAST(DESCRIPTION as VARCHAR (256)) AS DESCRIPTION
  10. Execute the ALTER statement by pressing the function key F5, clicking the Execute button in the SSMS toolbar, or selecting Execute from the Query menu