Can the incident deletion process be manually started?
book
Article ID: 159568
calendar_today
Updated On:
Products
Data Loss Prevention Enforce
Issue/Introduction
While the incident deletion process runs automatically on a nightly basis, is there a way of running it on demand, manually?
Resolution
The ability to schedule, review and immediately invoke incident deletion can all be found under System > Incident Deleter > Delete Incidents.
Once an incident has been deleted from the Enforce server, the relevant items in the Oracle database are flagged for deletion. On a nightly basis, the InvokeIncidentDeletion script is launched which then passes calls to Oracle to actually delete the cells marked with the deletion flags.
Outside of the nightly schedule, the process can be invoked manually by setting the Next scheduled deletion time and selecting one of the options and setting the specific time you would like to begin the deletion process.
Note: It is not recommended to launch the deletion process during production business hours, as it will have a significant impact on performance of DLP overall.