Chart Error

[Anonymous]

ive just started to see this error on my dashlettes, as well as the associated charts.

Unable To Fetch Schema From The Data Source.

grepping through the messages files yields nothing. i have opened a ticket but in an effort to see if anyone else has come across this im opening up a topic here.

mark

[Anonymous]

paul,

my cases are 00458339 as well as 438118

[RSAAdmin]

I can confirm that we do have a fix in place for the charting error that you originally described in this thread and that it is targeted to be released in 10.3.3 (10.3 SP3). This issue should probably only impact some of the charts and not all of the charts that can be created.  I have been using quite a few charts and didn't run into this issue, so you may or may not experience this issue with some of your charts.

The other two issues that I am looking at are the "direction" issue and the reconstruction issues.  I will reply on those when I get a chance to review the cases.  Thank you for your patience.

[Anonymous]

thanks paul.

from what ive been told its the normal pattern for it.

this can be duplicated by doing a download of say ubuntu and then looking at the resulting traffic in SA.

and unless you look specifically at the actions (which isnt possible for all protocols. ) of the conversations to figure out if it was a get or put request.

[huanzhou1]

i got hotfix: security-analytics-web-server-10.3.2.7033-1.noarch.rpm from support regarding the web reconstruction issue, not yet tested.

Guys, i think you may ask support for that see whether fix your issue or not.

[Anonymous]

I just requested it and will report back what I see.

[Anonymous]

Didnt work for us, I applied the hotfix but same result.

[huanzhou1]

i think the hotfix more for web Reconstruction not for report. i'm still trying to get the release note from support see what it fixed.

[Anonymous]

Correct, sorry we switched topics. I meant for web reconstruction...

Clarification: The hotfix partially fixed this... Support is investigating the issue now

[huanzhou1]

let us know if any update.

[Anonymous]

We have the same issue and most of the manual queries and reports return error "Unable to fetch schema from the data source". The issue was intermittent but lately its more frequent. We are currently running 10.3 SP1. Raised a case 00498559 with support.