Symantec Data Loss Prevention (DLP) Enforce server is filling up with .bad files located in \Vontu\Protect\Incidents or \SymantecDLP\Protect\Incidents.
Additionally, a 404 browser redirect error may be present when navigating in the Enforce console.
IncidentPersister0.log
VontuIncidentPersister.log
This is due to the LOB_TABLESPACE in the DLP Oracle database running out of space which then prevents the Enforce server from processing incidents.
Confirm the LOB_TABLESPACE is full:
NOTE: If you cannot access the console, you may run the following query in sqlplus as sysdba to see tablespace usage instead:
set pages 100 set lines 100 SELECT d.status "Status", d.tablespace_name "Name", TO_CHAR(NVL(a.bytes / 1024 / 1024, 0),'99999990D900') "Size (M)", TO_CHAR(NVL(NVL(f.bytes, 0), 0)/1024/1024 ,'99999990D900') "Free (MB)", TO_CHAR(NVL((NVL(f.bytes, 0)) / a.bytes * 100, 0), '990D00') "Free %" FROM sys.dba_tablespaces d, (select tablespace_name, sum(bytes) bytes from dba_data_files group by tablespace_name) a, (select tablespace_name, sum(bytes) bytes from dba_free_space group by tablespace_name) f WHERE d.tablespace_name = a.tablespace_name(+) AND d.tablespace_name = f.tablespace_name(+) AND NOT (d.extent_management like 'LOCAL' AND d.contents like 'TEMPORARY') order by "Free %"; -------------------------------------------------------------------------------
You should see an output similar to the following with a lower FREE % nearing 0%:
To resolve the issue:
References:
Where is the Oracle alert_protect.log?
What is the LOB_TABLESPACE used for?
How do I extend tablespace in Oracle?