000029618 - Unable to create an ODBC connection with Oracle database in RSA NetWitness Platform

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support on Sep 27, 2019
Version 5Show Document
  • View in full screen mode

Article Content

Article Number000029618
Applies ToRSA Product Set: Security Analytics, NetWitness Logs & Network
SA Product/Service Type: Log Collector
RSA Version/Condition: 10.x, 11.x
Platform: CentOS
O/S Version: EL6, EL7
IssueObserve that when integrating an Oracle ODBC event source with the RSA Security Analytics log collector the following error might appear in the collector logs: 

[oracle_11g_auditing.TEST_192_168_1_100] [processing] [TEST_192_168_1_100] [processing] An error occurred creating an ODBC connection.
 The DSN for this connection is: TEST_192_168_1_100  The trapped error is: Unable to create an ODBC connection.
DSN: TEST_192_168_1_100; username: audit_reader; reason: state: S1000; error-code: 26740354715747226; description:
[RSA][ODBC Oracle Wire Protocol driver][Oracle]ORA-00922: missing or invalid option

CauseThe error indicates a driver issue but it has been identified that the problem can be caused by the "EditionName" field from the DSN configuration page of the event source in the Security analytics interface.

User-added image

the root cause of this issue is currently being investigated
ResolutionTo resolve the issue, remove the EditionName field from the DSN configuration page of the event source in the Security analytics interface.

If you still face the issue after removing the EditionName field, contact RSA Technical Support.