ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Incidents are not available in the Enforce console

book

Article ID: 172351

calendar_today

Updated On:

Products

Data Loss Prevention Enforce

Issue/Introduction

Symantec Data Loss Prevention (DLP) Enforce test data used to trigger incidents in the past has stopped creating incidents.

'Incident Queue' appears to be growing throughout the day.

New incidents do not appear in scheduled reports for several days.

Resolution

Restart Incident Persister server and monitor the Incident Queue.

Check for .bad files on the Enforce server. See What is a .bad file? for file locations and possible causes.

Confirm sufficient database space is available to commit additional incidents. See Error: "ORA-01691: unable to extend lob segment" for information regarding database available space and how to add more datafiles if needed.