QNA returns "The expression could not be evaluated for an unknown reason"

Content Authoring
1

When I run the following QnA query on a subset of my RHEL6 machines

Q: number of sockets whose (exist matches (regex “.*”) of “udp” of it) of network
E: The expression could not be evaluated for an unknown reason.

Q: tcp of sockets of network
E: The expression could not be evaluated for an unknown reason.
T: 42043406

Q: udp of sockets of network
E: The expression could not be evaluated for an unknown reason.
T: 5399965

I get the same unknown error, these clients are all running v9.5.12.
As a result of this several CIS health-checks are returning false positives.

Does anyone have any idea what’s causing this error

Thanks!

2

Try the “plural” and see if it produces any change in the response:
Q: udps of sockets of network
A: False
A: False
A: False
A: False

Q: tcps of sockets of networks
A: True
A: True
A: True

3

First relevance, the quotation marks are wrong, that’s why you are seeing the error.
The correct relevance is;

  • number of sockets whose (exist matches (regex “.*“) of “udp” of it) of network

Second and Third relevance, just add the plural at the relevance statement that would work. The correct relevance for both;

  • tcps of sockets of network
  • udps of sockets of network
1 Like