This is the information from the Alerts tab now.
Failed to construct filter=SELECT mac FROM endpoints where mac = '%{Connection:Client-Mac-Address-Lower}';
.
Failed to get value for attributes=[mac-check-db]
Here is how I entered it.
SELECT mac FROM endpoints where mac = '%{Connection:Client-Mac-Address-Lower}';