You configured export logging in Symantec Endpoint Protection Manager (SEPM) to export(dump) log to file or syslog server but risk log is not exported to them while other logs (e.g. system log) are exported to them.
Following error is logged in <SEPM install path>\tomcat\logs\scm-server-0.log:
2021-02-17 18:42:13.907 THREAD 92 severe: in: com.sygate.scm.server.task.ExternalLoggingWorker
java.sql.SQLException: [Sybase][JDBC Driver][SQL Anywhere]Subquery cannot return more than one row
at sybase.jdbc4.sqlanywhere.IIResultSet.next(Native Method)
at sybase.jdbc4.sqlanywhere.IResultSet.next(IResultSet.java:599)
at org.apache.tomcat.dbcp.dbcp.DelegatingResultSet.next(DelegatingResultSet.java:207)
at org.apache.tomcat.dbcp.dbcp.DelegatingResultSet.next(DelegatingResultSet.java:207)
at com.sygate.scm.server.task.ExternalLoggingWorker.handleLog(ExternalLoggingWorker.java:508)
at com.sygate.scm.server.task.ExternalLoggingWorker.run(ExternalLoggingWorker.java:359)
at java.util.TimerThread.mainLoop(Timer.java:555)
at java.util.TimerThread.run(Timer.java:505)
Symantec Endpoint Protection client is installed on localized Linux.
This issue is fixed in Symantec Endpoint Protection 14.3. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.
ESCRT-1957, ESCRT-2514