WMI scans are not working

[lzammit]

Warning: 1048: Column 'report_id' cannot be null:

Sep 30 13:57:35 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] security event 1200005 added for 00:e0:4c:01:59:ca as open (pf::security_event::security_event_add)
Sep 30 13:57:35 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] executing action 'log' on class 1200005 (pf::action::action_execute)
Sep 30 13:57:35 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] /usr/local/pf/logs/security_event.log 2020-09-30 13:57:35: Pre Reg System Scan (1200005) detected on node 00:e0:4c:01:59:ca (172.22.145.172) (pf::action::action_log)
Sep 30 13:57:35 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] Pre Registration Scan - Current Scan Engine is : WMI-Scanner (pf::api::trigger_scan)
Sep 30 13:57:36 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] Instantiate profile Wired-Mac-Auth (pf::Connection::ProfileFactory::_from_profile)
Sep 30 13:57:36 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] New ID generated: 16014886563959ca (pf::util::generate_id)
Sep 30 13:57:36 testing-c7 pfqueue: pfqueue(31633) WARN: [mac:00:e0:4c:01:59:ca] Warning: 1048: Column 'report_id' cannot be null (pf::dal::db_execute)
Sep 30 13:57:36 testing-c7 packetfence_httpd.webservices: httpd.webservices(23844) INFO: [mac:00:e0:4c:01:59:ca] security_event 1200005 closed for 00:e0:4c:01:59:ca (pf::security_event::security_event_close) 

*************************** 1. row ***************************
         id: 16014886563959ca
  tenant_id: 1
         ip: 172.22.145.172
        mac: 172.22.145.172
       type: wmi
 start_date: 2020-09-30 13:57:36
update_date: 2020-09-30 13:57:36
     status: closed
  report_id:
*************************** 2. row ***************************
         id: 16014922577959ca
  tenant_id: 1
         ip: 172.22.145.172
        mac: 172.22.145.172
       type: wmi
 start_date: 2020-09-30 14:57:37
update_date: 2020-09-30 14:57:38
     status: closed
  report_id:

[WMI-Scanner]
wmi_rules=ServicePackUpdated
duration=20s
categories=default
registration=0
username=administrator
domain=WORKGROUP
post_registration=0
password=jsemaanlovesmanchicken
pre_registration=1
type=wmi

[julsemaan]

@lzammit will test again since the report_id warning seems to be unrelated to the actual issue (WMI isn't working)

[jrouzierinverse]

@lzammit can we close this?

[lzammit]

I would say yes since it does not prevent the scan from running.