DLP Upgrade fails; ORA-04009 seen in the sql_error.log file

Products

• Data Loss Prevention Enforce

Issue/Introduction

Upgrade of DLP fails during the database schema upgrade; reviewing sql_error.log you see:

ERROR       : ORA-04009: MAXVALUE cannot be made to be less than the current value

Cause

Numeric Overflow can cause this error; to confirm, the following should be used to determine if there is Numeric Overflow on any of our sequences. 

Log into SQLPlus as PROTECT user and run the following script:
 
select * from
(select round(LAST_NUMBER / DECODE(S.MAX_VALUE, 9999999999999999999999999999, 2147483647, S.MAX_VALUE) * 100.0, 4) as PCT_UTILIZATION,
S.SEQUENCE_NAME, S.INCREMENT_BY, S.LAST_NUMBER
from USER_SEQUENCES S
order by PCT_UTILIZATION desc)
where ROWNUM <= 10;

2.       Interpret the results:
 
•         The first column “PCT_UTILIZATION” displays the current capacity utilization of the DLP system ID (identification number) whose name is displayed on column #2 (SEQUENCE_NAME). This number should be low and as far away as possible from the 100% limit.
•         If your DLP version is earlier than 12.5.2 and the top number(s) are getting close to 100% (in the 60% to 80% range for example), your DLP system is at risk of hitting the numeric overflow defect within a short timeframe if not upgraded to a version that contains the fix. Versions 14.0.2 and 14.5 provide a complete fix to the problem.
•         If your DLP version is 12.5.2 or later and the top number(s) are elevated (higher than 20%), this is unexpected. Although there is no risk to your system at this level, please contact Symantec technical support and report the issue for further analysis.
•         If the top number(s) are above 100%, your DLP system is already affected by the problem and you should contact Symantec technical support immediately (whether you have already observed failure symptoms or not yet).

Resolution

 If Numeric Overflow is found a technical support case will need to be opened to address the issue.