Gatekeeper module: Failed to set matching string information for rule $rule_id
Error code: 57434
Error text: Gatekeeper module: Failed to set matching string information for rule$rule_id
Affected module: brightmail_engine
Product version: Symantec Brightmail Gateway 9.0 and later versions
The message audit log does not contain a specific text string of matching text information nor it is displayed in the Content Incident Folder message detail screen.
There are several possible causes, but any cause other than an issue with the message content is reflected in other error messages in the log surrounding this message. An issue with the message content generally results from a content filtering policy condition, which has wildcard characters such as '.' '\W' or '\D' at either the beginning or end of a pattern or a regular expression. Additionally, the message must contain non-ASCII (often non-English) text, and finally the filtering engine must fail to interpret the text which matches the regular expression or pattern in a particular way.
The $rule_id is an internal identifier for the specific policy condition that causes this error. The $rule_id does not reflect anywhere in the Control Center.
As this error does not affect the message filtering, no action is required. However, this issue affects the reports of matching text strings (both in the message audit logs and the matching text displayed in the Content Incident Folder message detail screen).
Symantec recommends that you construct conditions for your content filtering policies by beginning and ending patterns and regular expressions with literal strings or the wild card conditions that does not match non-ASCII characters such as '\b' or '\s'.
If you cannot resolve this issue, contact Symantec customer support.
The following is a sample of the error message as it appears in the bmserver_log.
Gatekeeper module: Failed to set matching string information for rule 514
Imported Document ID: HOWTO74479
Subscribing will provide email updates when this Article is updated. Login is required.