Scheduled reports arrive with no data in the body after upgrading to 14.3 RU4 or later

Products

• Endpoint Protection

Issue/Introduction

After upgrading your SEPM to 14.3 RU4 or later, you notice your scheduled reports arrive without any data in the body of the email.  It may look like this:

 

Reviewing the %SEPM%\Php\Include\Inventory\InventoryQueries.php file, you note a section looks like this:

 function __construct(){
    $this->mutil= new UtilClass();
    $this->ALL_WINDOWS = "(SA.R_OS_TYPE NOT IN (".$this->mutil->macOsConstants.") AND (SA.R_OS_TYPE & 0xF0FF0000) NOT IN (0x20000000))";   
    $this->NO_LINUX = "SA.R_OS_TYPE & 0xF0FF0000 <> 0x20000000";
    $this->ALL_LINUX = $this->mutil->getQueryOSType('0300');

Environment

14.3 RU4 or later SEP Manager

Cause

The InventoryQueries.php file was not upgraded properly.  In 14.3 RU4, this section was replaced with the following:

function __construct(){
    $this->mutil= new UtilClass();
    $this->ALL_WINDOWS = "(SA.OS_TYPE_TEXT ='WIN')";
    $this->NO_LINUX = "SA.OS_TYPE_TEXT <> 'LINUX'";
    $this->ALL_LINUX = "SA.OS_TYPE_TEXT = 'LINUX'";

Resolution

Symantec recommends uninstalling and reinstalling any affected SEPMs.  As a workaround, you can stop the Symantec Endpoint Protection Manager service, and replace the InventoryQueries.php file with a version from another 14.3 RU4 SEPM where the "function __construct(){" is correct , then restart the Symantec Endpoint Protection Manager service.