Incidents are queuing up on the Detection server and not getting transfered to the Enforce server.
The errors that show up in the IncidentWriter log are:
One or more of the following:
<date and time> com.vontu.communication.dataflow.ShippingTask processErrorResponse
WARNING: Shipping Task(5231): The shipment was aborted because the receiving task timeout out!
and one of:
<date and time> com.vontu.logging.LocalLogWriter write
SEVERE: Error sending incident. Unexpected error occurred while sending an incident.
The shipment was aborted because the receiving task timeout out!
Look in the incident writer log for more information.
Relevant versions: ALL
This is caused by a timeout in the transport of an incident from Detection server to the Enforce server.
If changing the port and/or server NIC settings clears the problem, it is a rare problem with the Ethernet Switch port auto negotiate operation.
See related article TECH220083 for more information on the issue.