Discover scan failing - Too many consecutive errors

book

Article ID: 160312

calendar_today

Updated On:

Products

Data Loss Prevention Network Discover

Issue/Introduction

Scan of network share stops before completing the scan. The following error appears: Failed to complete Share: \\share_name\ ; error: Too many consecutive errors.

Error: Too many consecutive errors.

Resolution

Look for the crawler.properties file and open it with notepad or any other text editor.

# *****************************
# Settings used by the Crawler.
# *****************************

# The maximum number of consecutive errors before a share is abandoned.
crawler.maximum.consecutive.error=100

You can increase this value as needed.

There is likely some sort of issue with part of the target causing the problem. Check the log for details.

You can also increase the logging levels. See TECH221838:

How do I set Logging Levels for Discover

In order to trouble-shoot crawler problems it is usually necessary to bump up the verbosity level(s) for the log files: Delete the logs (or simply move them). Locate the FileReaderLogging.properties file (C:\Vontu\Protect\config\FileReaderLogging.properties) and add the following lines:

java.util.logging.FileHandler.level = FINE

com.vontu.directorycrawler.level = FINE
com.vontu.filescan.RawFileInductor.level = FINE
com.vontu.directorycrawler.sharepointmapper.level = FINE 

Then restart the Monitor.

Typically, a scan will continue when errors are encountered, unless the scan consecutively hits the maximum number of errors defined in the "crawler.maximum.consecutive error" section of the crawler.properties file. Changing the Consecutive Error threshold can alleviate this problem. Go to the following directory:

For Windows:  \SymantecDLP\Protect\config\crawler.properties

For Linux: /opt/SymantecDLP/Protect/config/crawler.properties