Tanium Import error - can anyone help

[mdh33955]

Hello!

I am hoping someone can help. We have had a ticket open for 1 week with Flexera, and our import has not run since that time due to the error we started to receive last week, after a Flexera upgrade.  See below. We have provided logs to Flexera engineering to no avail and we really need to run this import. Our Tanium team states nothing has change on their side. 

Inventory gathering failed. Error: An error occurred while enumerating through a collection: Bad JSON escape sequence: \_. Path 'data[19].asset_last_logged_in_user', line 1, position 36743..

Appreciate any help!

[ChrisG]

This is likely due to the issue referenced at the following link: https://community.flexera.com/t5/FlexNet-Manager-Suite-Known/FlexNet-Manager-Suite-Flexera-One-ITAM-Known-Issues/ta-p/190476?filter=IOK-1257435

This issue can occur if data retrieved from Tanium includes any text that matches the following pattern: \u00<0 or 1><a to f, or 0-9>

For example (and considering the reference to "asset_last_logged_in_user" in the specific error message you are seeing), if there is a user account name in a “last logged on user” field in Tanium like “MYDOMAIN\u001fAnythingElse” in your environment then it would be likely trigger this issue because there is a sequence of characters in the middle of this string that matches the above pattern.

Unfortunately I don’t know of any effective workaround that is available at this time, but the fix version details at the above link will be updated once a fix for the issue is released.

[tblock10]

Thanks Chris, you described the problem clearly. When I look at IOK-1257435, all I see is the summary, "Tanium import may fail with with error: "Bad JSON escape sequence: \_. [...]". Is that meant to correct specifically the "\u00<0 or 1><a to f, or 0-9>" pattern issue?  Given this pattern can be a legitimate pattern, like an AD user name, and the fact it fails the entire import at that point, is there any way to tell if progress is being made to correct it?

[ChrisG]

Yes - the error message noted in the issue description is what is reported when data with the problematic "\u00<0 or 1><a to f, or 0-9>" pattern is found.

The "Fixed in" column in the Known Issues list will be updated with version details once a version of FlexNet Manager Suite or Flexera One ITAM is released containing a fix for the issue.