bug: SweepCompiler: SRQL query failed #894

Closed
opened 2026-03-28 04:29:39 +00:00 by mfreeman451 · 0 comments
Owner

Imported from GitHub.

Original GitHub issue: #2572
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/2572
Original created: 2026-01-28T22:51:19Z


Describe the bug

We're not getting updates about sweep/scan results that we have configured and are being performed by the agent. Agent is healthy and doing what it should, doesn't look like it is getting forwarded past the serviceradar-agent-gateway

What is also really even more confusing, is that we are running SweepCompiler on the agent gateway. The agent gateway should be passive and completely unaware of the types of traffic or the payload of traffic and just pass everything to the core-elx for re-assembly and processing.

22:47:01.808 [warning] SweepCompiler: SRQL query failed - %Postgrex.Error{message: nil, postgres: %{code: :undefined_table, line: "1449", message: "relation \"ocsf_devices\" does not exist", position: "1028", file: "parse_relation.c", unknown: "ERROR", severity: "ERROR", pg_code: "42P01", routine: "parserOpenTable"}, connection_id: 10931, query: "SELECT \"ocsf_devices\".\"uid\", \"oc
sf_devices\".\"type_id\", \"ocsf_devices\".\"type\", \"ocsf_devices\".\"name\", \"ocsf_devices\".\"hostname\", \"ocsf_devices\".\"ip\", \"ocsf_devices\".\"mac\", \"ocsf_devices\".\"uid_alt\", \"ocsf_devices\".\"vendor_name\", \"ocsf_devices\".\"model\", \"ocsf_devices\".\"domain\", \"ocsf_devices\".\"zone\", \"ocsf_devices\".\"subnet_uid\", \"ocsf_devices\".\"vlan_uid\", \"ocsf_devices\".\"region\", \"ocsf_devices\".\"first_seen_time\", \"ocsf_devices\".\"last_seen_time\", \"ocsf_devices\".\"created_time\", \"ocsf_devices\".\"modified_time\", \"ocsf_devices\".\"risk_level_
id\", \"ocsf_devices\".\"risk_level\", \"ocsf_devices\".\"risk_score\", \"ocsf_devices\".\"is_managed\", \"ocsf_devices\".\"is_compliant\", \"ocsf_devices\".\"is_trusted\", \"ocsf_devices\".\"os\", \"ocsf_devices\".\"hw_info\", \"ocsf_devices\".\"network_interfaces\", \"ocsf_devices\".\"owner\", \"ocsf_devices\".\"org\", \"ocsf_devices\".\"groups\", \"ocsf_devices\".\"agent_list\", \"ocsf_devices\".\"gateway_id\", \"ocsf_devices\".\"agent_id\", \"ocsf_devices\".\"discovery_sources\", \"ocsf_devices\".\"is_available\", \"ocsf_devices\".\"metadata\" FROM \"ocsf_devices\" ORD
ER BY \"ocsf_devices\".\"last_seen_time\" DESC, \"ocsf_devices\".\"uid\" DESC LIMIT $1 OFFSET $2"}                                                                                               22:47:01.808 [warning] SweepCompiler: TCP mode enabled but ports empty for group demo (8508c753-880f-4b6e-ba02-a54064b423d8); dropping TCP modes

To Reproduce
Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: [e.g. iOS]
  • Browser [e.g. chrome, safari]
  • Version [e.g. 22]

Smartphone (please complete the following information):

  • Device: [e.g. iPhone6]
  • OS: [e.g. iOS8.1]
  • Browser [e.g. stock browser, safari]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.

Imported from GitHub. Original GitHub issue: #2572 Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/2572 Original created: 2026-01-28T22:51:19Z --- **Describe the bug** We're not getting updates about sweep/scan results that we have configured and are being performed by the agent. Agent is healthy and doing what it should, doesn't look like it is getting forwarded past the `serviceradar-agent-gateway` What is also really even more confusing, is that we are running `SweepCompiler` on the agent gateway. The agent gateway should be passive and completely unaware of the types of traffic or the payload of traffic and just pass everything to the `core-elx` for re-assembly and processing. ``` 22:47:01.808 [warning] SweepCompiler: SRQL query failed - %Postgrex.Error{message: nil, postgres: %{code: :undefined_table, line: "1449", message: "relation \"ocsf_devices\" does not exist", position: "1028", file: "parse_relation.c", unknown: "ERROR", severity: "ERROR", pg_code: "42P01", routine: "parserOpenTable"}, connection_id: 10931, query: "SELECT \"ocsf_devices\".\"uid\", \"oc sf_devices\".\"type_id\", \"ocsf_devices\".\"type\", \"ocsf_devices\".\"name\", \"ocsf_devices\".\"hostname\", \"ocsf_devices\".\"ip\", \"ocsf_devices\".\"mac\", \"ocsf_devices\".\"uid_alt\", \"ocsf_devices\".\"vendor_name\", \"ocsf_devices\".\"model\", \"ocsf_devices\".\"domain\", \"ocsf_devices\".\"zone\", \"ocsf_devices\".\"subnet_uid\", \"ocsf_devices\".\"vlan_uid\", \"ocsf_devices\".\"region\", \"ocsf_devices\".\"first_seen_time\", \"ocsf_devices\".\"last_seen_time\", \"ocsf_devices\".\"created_time\", \"ocsf_devices\".\"modified_time\", \"ocsf_devices\".\"risk_level_ id\", \"ocsf_devices\".\"risk_level\", \"ocsf_devices\".\"risk_score\", \"ocsf_devices\".\"is_managed\", \"ocsf_devices\".\"is_compliant\", \"ocsf_devices\".\"is_trusted\", \"ocsf_devices\".\"os\", \"ocsf_devices\".\"hw_info\", \"ocsf_devices\".\"network_interfaces\", \"ocsf_devices\".\"owner\", \"ocsf_devices\".\"org\", \"ocsf_devices\".\"groups\", \"ocsf_devices\".\"agent_list\", \"ocsf_devices\".\"gateway_id\", \"ocsf_devices\".\"agent_id\", \"ocsf_devices\".\"discovery_sources\", \"ocsf_devices\".\"is_available\", \"ocsf_devices\".\"metadata\" FROM \"ocsf_devices\" ORD ER BY \"ocsf_devices\".\"last_seen_time\" DESC, \"ocsf_devices\".\"uid\" DESC LIMIT $1 OFFSET $2"} 22:47:01.808 [warning] SweepCompiler: TCP mode enabled but ports empty for group demo (8508c753-880f-4b6e-ba02-a54064b423d8); dropping TCP modes ``` **To Reproduce** Steps to reproduce the behavior: 1. Go to '...' 2. Click on '....' 3. Scroll down to '....' 4. See error **Expected behavior** A clear and concise description of what you expected to happen. **Screenshots** If applicable, add screenshots to help explain your problem. **Desktop (please complete the following information):** - OS: [e.g. iOS] - Browser [e.g. chrome, safari] - Version [e.g. 22] **Smartphone (please complete the following information):** - Device: [e.g. iPhone6] - OS: [e.g. iOS8.1] - Browser [e.g. stock browser, safari] - Version [e.g. 22] **Additional context** Add any other context about the problem here.
mfreeman451 added this to the 1.1.0 milestone 2026-03-28 04:29:39 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
carverauto/serviceradar#894
No description provided.