All Apps and Add-ons

Which McAfee EPO server database you are using for SQL query required by McAfee addon in DB Connect app

damode
Motivator

After ePO is upgraded to the latest version, a new SQL database is created in addition to the existing ePO database (ePO_Servername) with the format: ePO_Servername_Events .

I am getting the results of the SQL query successfully when I chose ePO_servername database as it seems to have all the tables required for join operation as below.
• EPOEvents
• EPOLeafNode
• EPOProdPropsView_VIRUSCAN
• EPOComputerProperties
• EPOEventFilterDesc

However, the DBA says I should use ePO_servername_Events database, but when I use this DB, all I get is the EPOEvents table.

I am sure there might be few here who have had to go through this same problem. Can you please share which DB you chose or how you made this work ?

Thanks in advance.

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...