Skip to content
  • There are no suggestions because the search field is empty.

Error occurred while validating query syntax is displayed when running rules with empty lists that are used but not quoted in RSA Security Analytics

Issue

When you execute a rule with list values that are not quoted  the rule execution fails with the following ambiguous error message:
"Error occurred while validating query syntax"

User-added

Resolution

To get this error fixed please quote the list values, navigate to:
  1. Security Analytics menu, click Administration > Reports. (The Manage tab is displayed.)
  2. Click Lists. (The List view is displayed.)
  3. In the List toolbar, click Edit. (The Build List view tab is displayed.)
  4. The following figure shows the Build List view: User-added

  • Check the column: Quotes will be inserted for all values 



Product Details

RSA Product Set: Security Analytics
RSA Product/Service Type: Reporting Engine, Security Analytics UI
RSA Version/Condition: 10.6.x
Platform: CentOS
O/S Version: EL6

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue