All Apps and Add-ons

Which McAfee EPO server database you are using for SQL query required by McAfee addon in DB Connect app

damode
Motivator

After ePO is upgraded to the latest version, a new SQL database is created in addition to the existing ePO database (ePO_Servername) with the format: ePO_Servername_Events .

I am getting the results of the SQL query successfully when I chose ePO_servername database as it seems to have all the tables required for join operation as below.
• EPOEvents
• EPOLeafNode
• EPOProdPropsView_VIRUSCAN
• EPOComputerProperties
• EPOEventFilterDesc

However, the DBA says I should use ePO_servername_Events database, but when I use this DB, all I get is the EPOEvents table.

I am sure there might be few here who have had to go through this same problem. Can you please share which DB you chose or how you made this work ?

Thanks in advance.

Labels (2)
0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk Observability Cloud – June 2025

What’s New in Splunk Observability Cloud – June 2025 We are excited to announce the latest enhancements to ...

Almost Too Eventful Assurance: Part 2

Work While You SleepBefore you can rely on any autonomous remediation measures, you need to close the loop ...

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

 Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research Team (STRT) and ...