We are getting the following error when trying to use the IP360 Add-on:
ERROR: operator does not exist: timestamp with time zone > character varying
This appears to be an issue with the checkpoint value getting applied back to the query. The initial run completes fine, saves the new checkpoint value, but we get this error on all further queries.
SQL from the add-on:
SELECT * FROM (select start_date, audit_id, end_date, end_date - start_date as duration, s.status
, n.network_id
, n.name
, (SELECT string_agg(range, ', ') from nc_network_range where network_id = a.network_id) as networkinc
, (SELECT string_agg(exclude::text, ', ') from nc_network_range where network_id = a.network_id) as networkexc
, '?' as networktotal
, '?' as networkgroups
, n.active as networkactive
, sp.name as scan_profile_name
, a.dp_id
, 'no permissions' as dpname
, 'no permissions' as dphw
, 'no permissions' as dpip
from nc_audit a
inner join nc_network n on n.network_id = a.network_id
inner join nc_audit_status s on s.status_id = a.status_id
left join nc_scan_profile sp on sp.scan_profile_id = a.scan_profile_id
where end_date IS NOT NULL AND start_date > cast('2017-08-15 00:00:00' as timestamp)) t WHERE \"end_date\" > ? ORDER By \"end_date\" ASC
Example Checkpoint value:
2017-08-18 13:08:57.748866-04
Our environment:
- Splunk 6.5.3
- DB Connect 2.4
- Tripwire IP360 7.5.2
... View more