Discover scans are now running slow

book

Article ID: 159549

calendar_today

Updated On:

Products

Data Loss Prevention Network Discover

Issue/Introduction

The first few runs of a discover scan ran at a good rate.  Suddenly the scans are not running as fast.  The file and data numbers are much, much lower than previous runs.

Is there a problem with the scans?

Resolution

In the Discover target, check the "Scanned Content" tab.  At the bottom is a section "File Date Filters".  Is "None" checked or one of the other options?

If the option "None" is checked, then there may be errors in the scan.  Review the detection server logs or contact Technical Support for assistance.

If either of the other options is checked, the scan is operating in a differential mode.  In this mode, all files are checked to see if they meet the date requirements.  If they meet the date criteria they are processed and the file and data count is changed accordingly. 

Files that are not processed do not change the file and data counts.  However, there is processing done to determine if the file needs to be processed.  This work doesn't appear in the scan so it can appear that the scan is running slower.  The scan is working, it just appears slower because it isn't reporting the files that it has examined and decided not to process.