The aggregator_temp_incident_data folder is filling up on a detection server and incidents stop processing

Products

• Data Loss Prevention Enforce

Issue/Introduction

The <INSTALLDIR>SymantecDLP\Protect\temp\aggregator_temp_incident_data folder fills with temporary numbered incident folders and stops processing new incidents.
The folder it is trying to process may show one .tmp file that keeps growing in size.

No error messages show for the server in Enforce

Cause

Corrupt temporary incident file\folder

Resolution

1. Stop the DLP Detection Server Service service on the detection server.
2. Move the corrupt temp incident folder out of the aggregator_temp_incident_data folder or just erase theese folders inside aggregator_temp_incident_data.
3. Start the DLP Detection Server Service on the Detection server.