IBM Support

QRadar: Collecting events from Oracle database results in ORA-1882 error

Troubleshooting


Problem

When trying to collect events from an Oracle database, it resulted in the error ORA-1882

Symptom

Unable to receive events from Oracle database.

Diagnosing The Problem

Review /var/log/qradar.log

Look for an entry similar to:

ORA-00604: error occurred at recursive SQL level 1
ORA-01882: timezone region not found

Run the below command on the Oracle database command line to review the supported time zones in the database:

select distinct tzname from v$timezone_names

Resolving The Problem

Change the time zone of the QRadar server to a time zone supported by the Oracle database or add the missing time zone to the Oracle database.

 

For additional assistance. See Developer Works Protocol-JDBC-7.2



Where do you find more information?


[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Integrations - 3rd Party","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 August 2018

UID

swg21681299

Page Feedback