Unable to create an ODBC connection with Oracle database in RSA NetWitness Platform

Issue

Observe that when integrating an Oracle ODBC event source with the RSA Security Analytics log collector the following error might appear in the collector logs:

 [oracle_11g_auditing.TEST_192_168_1_100] [processing] [TEST_192_168_1_100] [processing] An error occurred creating an ODBC connection.
 
 The DSN for this connection is: TEST_192_168_1_100  The trapped error is: Unable to create an ODBC connection. 
 
DSN: TEST_192_168_1_100; username: audit_reader; reason: state: S1000; error-code: 26740354715747226; description: 
 
[RSA][ODBC Oracle Wire Protocol driver][Oracle]ORA-00922: missing or invalid option

Cause

The error indicates a driver issue but it has been identified that the problem can be caused by the "EditionName" field from the DSN configuration page of the event source in the Security analytics interface.

the root cause of this issue is currently being investigated

Resolution

To resolve the issue, remove the EditionName field from the DSN configuration page of the event source in the Security analytics interface.

If you still face the issue after removing the EditionName field, contact Netwitness Technical Support.

Internal Comments

Corrected heading said
SA: unable to create an ODBC connection with Orable database

Product Details

Netwitness Product Set: NetWitness Platform
Netwitness Product/Service Type: Log Collector
Netwitness Version/Condition: 11.x, 12.x or later
Platform: CentOS/Alma Linux

Approval Reviewer Queue

Technical approval queue