All Apps and Add-ons

Which McAfee EPO server database you are using for SQL query required by McAfee addon in DB Connect app

damode
Motivator

After ePO is upgraded to the latest version, a new SQL database is created in addition to the existing ePO database (ePO_Servername) with the format: ePO_Servername_Events .

I am getting the results of the SQL query successfully when I chose ePO_servername database as it seems to have all the tables required for join operation as below.
• EPOEvents
• EPOLeafNode
• EPOProdPropsView_VIRUSCAN
• EPOComputerProperties
• EPOEventFilterDesc

However, the DBA says I should use ePO_servername_Events database, but when I use this DB, all I get is the EPOEvents table.

I am sure there might be few here who have had to go through this same problem. Can you please share which DB you chose or how you made this work ?

Thanks in advance.

Labels (2)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...