External logging does not export risk log

Products

• Endpoint Protection

Issue/Introduction

You configured export logging in  Symantec Endpoint Protection Manager (SEPM) to export(dump) log to file or syslog server but risk log is not exported to them while other logs (e.g. system log) are exported to them.

Following error is logged in <SEPM install path>\tomcat\logs\scm-server-0.log: 

2021-02-17 18:42:13.907 THREAD 92 severe:  in: com.sygate.scm.server.task.ExternalLoggingWorker
java.sql.SQLException: [Sybase][JDBC Driver][SQL Anywhere]Subquery cannot return more than one row
 at sybase.jdbc4.sqlanywhere.IIResultSet.next(Native Method)
 at sybase.jdbc4.sqlanywhere.IResultSet.next(IResultSet.java:599)
 at org.apache.tomcat.dbcp.dbcp.DelegatingResultSet.next(DelegatingResultSet.java:207)
 at org.apache.tomcat.dbcp.dbcp.DelegatingResultSet.next(DelegatingResultSet.java:207)
 at com.sygate.scm.server.task.ExternalLoggingWorker.handleLog(ExternalLoggingWorker.java:508)
 at com.sygate.scm.server.task.ExternalLoggingWorker.run(ExternalLoggingWorker.java:359)
 at java.util.TimerThread.mainLoop(Timer.java:555)
 at java.util.TimerThread.run(Timer.java:505)

Environment

Symantec Endpoint Protection client is installed on localized Linux.

Resolution

This issue is fixed in Symantec Endpoint Protection 14.3.  For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.

Additional Information

ESCRT-1957, ESCRT-2514