NULL insert failure during processing

Products

• Information Centric Analytics

Issue/Introduction

The Run User Loading Procedures step (5) of the nightly RiskFabric Processing job and the RiskFabric Intraday Processing job fails and logs the following error in the SQL Server Agent history log and in the Log_DataTransformation table of the RiskFabric relational database:

Procedure=spLDW_UpdateSymantecDLPUsers,Error=Cannot insert the value NULL into column 'AccountName', table 'RiskFabric.dbo.LDW_Users'; column does not allow nulls. UPDATE fails.

Environment

Version : 6.6.x

Component : Symantec DLP Integration Pack

Cause

Symantec Data Loss Prevention (DLP) Endpoint incidents generated by application activity do not contain a username, e-mail address, or other entity identifier. Consequently, the stored procedure dbo.spLDW_UpdateSymantecDLPUsers attempts to insert NULL values into the AccountName column of the table dbo.LDW_Users from the temp table #tempUsersMerge. Because this column is not nullable, the INSERT statement fails.

Resolution

An update to address this condition is included in the 6.7 release of Information Centric Analytics (ICA).