search cancel

CCS ANTLR exception

book

Article ID: 239794

calendar_today

Updated On:

Products

Control Compliance Suite Standards Server Control Compliance Suite

Issue/Introduction

Control Compliance Suite, we are seeing a new issue in CCS related to data collection on some RHEL assets.

When looking at the WorkerProcess log files you will see entries similar to the following.

2022-04-19 15:22:21.259,2022-04-19 09:22:21.259,RENDEV003687,Error,RMSDCInfra,Blade.WorkerProcess,9208,Dispatcher Submit Queue:10,10,Error,,0,0,"81377766-3475-484d-b142-4c36fe69b917error is Syntax Error: ANTLR exception: line 27:587: expecting RPAREN, found 'IncludeSubFolders' Line -1511624709 Column 486924100
"
2022-04-19 15:22:21.259,2022-04-19 09:22:21.259,RENDEV003687,Verbose,RMSDCInfra,Blade.WorkerProcess,9208,Dispatcher Submit Queue:10,10,RunQuery,,0,0,[RMSDCInfra Query] Query return code = 81377766-3475-484d-b142-4c36fe69b917 [0 ]
2022-04-19 15:22:21.259,2022-04-19 09:22:21.259,RENDEV003687,Verbose,RMSDCInfra,Blade.WorkerProcess,9208,Dispatcher Submit Queue:10,10,RunQuery,,0,0,[RMSDCInfra Query] RMSDCInfra running query memory freed = 81377766-3475-484d-b142-4c36fe69b917
2022-04-19 15:22:21.274,2022-04-19 09:22:21.274,RENDEV003687,Error,RmsXmlQuery,Blade.WorkerProcess,9208,Dispatcher Submit Queue:10,10,RunQuery,,0,0,"Error in RunQuery. Exception - Symantec.Interfaces.RMS.DCInfraException: [22097972-c1fa-45b0-9fe3-d1cd0b069936-1:58b0b309-9d1f-405e-b153-e0a046a8aa46] Syntax Error: ANTLR exception: line 27:587: expecting RPAREN, found 'IncludeSubFolders' Line -1511624709 Column 486924100

   at Symantec.Implementation.RMS.Query.ISSDKExecutor.RunQuery(IRMSQuery query, DCInfraConfiguration configuration, PropertyCallback _callback, AgentBasedQueryCallback _agentQueryCallback)"
2022-04-19 15:22:21.274,2022-04-19 09:22:21.274,RENDEV003687,Error,RMSMOSProvider,Blade.WorkerProcess,9208,Dispatcher Submit Queue:10,10,InitExecuteABQuery,,0,0,"Error in creating query for asset [afddb651-ba9c-40ac-80b2-3d76e91bcc69]:[rendev000246.ccslab.local:10.32.184.42]. Exception - Symantec.Interfaces.RMS.DCInfraException: [22097972-c1fa-45b0-9fe3-d1cd0b069936-1:58b0b309-9d1f-405e-b153-e0a046a8aa46] Syntax Error: ANTLR exception: line 27:587: expecting RPAREN, found 'IncludeSubFolders' Line -1511624709 Column 486924100

 

Cause

The cause has been found to be a single " at the end of a directory name, for example.

/home/cloud_user"

 

Environment

12.5.1 - 12.6

SCU 2021-1 - 2022-1

Resolution

Remove the single " from the directory name. A fix for this will be included in a future release.

Attachments