EDM profile search failed

Products

• Data Loss Prevention Enforce

Issue/Introduction

When viewing system events for a Detection server there is the following event:

 

 

EDM profile search failed:EDM profile search failed

 

In the FileReader0.log you may see the following error:

WARNING: EDM profile search failed. Failed to lookup index in RAM index process IDX_2_170. No further incidents will be detected against this RAM index instance.

Resolution

Find the value of the following in Indexer.properties

# If a term appears in SDP more then this number of times,
# it is considered a common term with appropriate ramifications
# during SDP indexing and detection.
sdp_term_commonality_threshold

If this value is more than 10, please ensure that it is set to 10.

 

For additional info on this setting please refer to the referenced article TECH218853.