Incidents are not available in the Enforce console
search cancel

Incidents are not available in the Enforce console

book

Article ID: 172351

calendar_today

Updated On:

Products

Data Loss Prevention Enforce

Issue/Introduction

Symantec Data Loss Prevention (DLP) Enforce test data used to trigger incidents in the past has stopped creating incidents.

'Incident Queue' appears to be growing throughout the day.

New incidents do not appear in scheduled reports for several days.

Resolution

Restart the Incident Persister service, and monitor the Incident Queue.

Check for .bad files on the Enforce server. See What is a .bad file? for file locations and possible causes.

Confirm sufficient database space is available to commit additional incidents. See Oracle tablespace (LOB_TABLESPACE, USERS, etc.) for DLP is full, almost full, or critically full (broadcom.com) for information regarding database available space and how to add more datafiles if needed.