IDM stops detecting after out of memory error is encountered

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Prevent for Web
• Data Loss Prevention for Tablets
• Data Loss Prevention Endpoint Discover

Issue/Introduction

During detection, if a message causes an out of process IDM to run out of memory, subsequent messages will not be detected by IDM until the filereader is restarted. The following error is recorded in the FileReader log:

com.vontu.detection.policy.engines.DocumentIndexCompiledCondition evaluate
SEVERE: Failed to detect on document match condition IDM_index_name.
com.vontu.profileindex.IndexException: Failed to lookup index in RAM index process DOCIDX_1234_1. No further incidents will be detected against this RAM index instance.

Resolution

This issue was fixed in DLP 11.1.1 per Etrack 2381488, release notes 11.1.2 and newer document the same.