DQL reports failing

I am running some sample DQL reports from the templates provided. I am having success with some however, some are failing on different indexers. Anyone else have a problem with failures?

1 Solution

Accepted Solutions
Highlighted
Accepted Solution!

Thanks Rod, it appears as if

Thanks Rod, it appears as if there is a memory configuration issue on the indexers that is causing problems with all large reports.
 

View solution in original post

2 Replies
Highlighted

Can you be more specific

Can you be more specific Drahrig? The templates allow for a starting point for modification in most cases or to provide an example to save time during the creation process. If a particular indexer is failing to return data we would want to ensure that there should be an expectation it contains data, that it is connected and commd service is functional between the MS and indexer worker nodes (C:\Program Files\Symantec\DataInsight\log\commd0.0.log) and then proceed to troubleshoot by researching the debug logs (based on the report ID) for any issues.

 

If this remains an issue can we assume you have eliminated the prerequisites and move to the log for the particular report?

DQL output_0.jpg

The log:

Note: format - |path\ReportID\Indexer Node ID\LogName (from Indexer)

 Directory of C:\Program Files\Symantec\DataInsight\log\reports\336\2

dql.log - contains the query run
reportrun0.0.log - contains debug results of execution

Note: Actual report data resides (post completion) on MS under C:\DataInsight\data\console\reports\reportruns\336 and on Indexers while being built.

Does that detail the error you faced?

 

Rod

Highlighted
Accepted Solution!

Thanks Rod, it appears as if

Thanks Rod, it appears as if there is a memory configuration issue on the indexers that is causing problems with all large reports.
 

View solution in original post