Error when running a CCS Query on a Windows file system: Error "Results are unavailable for the specified query run"
search cancel

Error when running a CCS Query on a Windows file system: Error "Results are unavailable for the specified query run"

book

Article ID: 245477

calendar_today

Updated On:

Products

Control Compliance Suite Standards Server Control Compliance Suite

Issue/Introduction

When running one specific "Security: File System (Effective)" query on the D:\ drive against some Windows assets (agentless query scan), it gives the error "Results are unavailable for the specified query run".

Environment

Release : CCS 12.6.0 with SCU 2022-1 applied  (agentless data collection)

Resolution

It can be a couple issues:

  • On those Windows servers that reported this error, those servers did not have a D:\ drive, so CCS was not able to scan a drive that did not exist. 

Or 

  • Verify that the Administrative Shares on that drive (in this example D:\ drive, so the D$ share) are in use.  Although it is not recommended by Microsoft, someone may have deleted or modified the Administrative share for that drive.

Additional Information

On the Manager that is scanning the agentless Window server reporting this error, you will also see the following in the WindowsDC.log (in verbose logging):

30 | 02 | 07/06/22 | 11:26:29 | ProcessInterface.cpp | 174 | Blade.WorkerProcess.exe | 4244 | 6772 | ReadListProcessInterfaceImpl::AddExceptionFile() - 1 - <message level="3"><desc><![CDATA[Could not get a valid UNC path for D:\ on machine <Windows_server_hostname>. The following rules were applied to identify the share: Use default admin share. To modify administrative share selection rules, use the Administrative Share Selections configuration item for bv-Control for Windows. - The system cannot find the path specified.]]></desc><asset type="WNT.MACHINE">