Observe that when integrating an Oracle ODBC event source with the RSA Security Analytics log collector the following error might appear in the collector logs:
[oracle_11g_auditing.TEST_192_168_1_100] [processing] [TEST_192_168_1_100] [processing] An error occurred creating an ODBC connection.
The DSN for this connection is: TEST_192_168_1_100 The trapped error is: Unable to create an ODBC connection.
DSN: TEST_192_168_1_100; username: audit_reader; reason: state: S1000; error-code: 26740354715747226; description:
[RSA][ODBC Oracle Wire Protocol driver][Oracle]ORA-00922: missing or invalid option
The error indicates a driver issue but it has been identified that the problem can be caused by the "EditionName" field from the DSN configuration page of the event source in the Security analytics interface.
To resolve the issue, remove the EditionName field from the DSN configuration page of the event source in the Security analytics interface.
If you still face the issue after removing the EditionName field, contact RSA Technical Support.