When is an Endpoint Agent Deleted from the Agent Overview?

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Discover

Issue/Introduction

When a user deletes Endpoint Agents from the Agent Overview list on the console, when does the actual deletion occur in the database?

Environment

DLP 15.x, 16.x

Resolution

According to the default settings, the deletion process is actually taking place at 1AM. The purpose is to avoid the deletion process from running during the day. Hence, once the user ticks Endpoint Agents for deletion on the UI we only mark the Agents for deletion while the actual deletion process runs after-hours.

The configuration file \Vontu\Protect\config\Manager.properties specifies the following parameters:

# EndpointDataDeletion.delay controls how long after the manager starts to first perform the task, in milliseconds.
# This controls when the subsequent executions will be performed. If commented out (default), the task will
# be scheduled to first run at the next occurrence of 1am.
#com.vontu.manager.system.EndpointDataDeletion.delay=43200000
# EndpointDataDeletion.period controls how often Endpoint Data Deletion occurs in milliseconds. The default is 24 hours.
com.vontu.manager.system.EndpointDataDeletion.period=86400000

 

#com.vontu.manager.system.EndpointDataDeletion.delay=43200000

Should be commented out, which indicates the deletion process would run at 1AM.

com.vontu.manager.system.EndpointDataDeletion.period=86400000

Indicates that it would run periodically every 24 hours.