Data Loss Prevention(DLP) Enforce incident cleanup job is failing

Products

• Data Loss Prevention Enforce
• Data Loss Prevention
• Data Loss Prevention Oracle Standard Edition 2

Issue/Introduction

DLP incident cleanup job has stopped running
Seeing various errors in localhost log

[com.vontu.manager.system.incident.deletion.scheduler.IncidentDeletorJob] Incident deletion job starting.

INFO [com.vontu.manager.system.incident.deletion.IncidentDeletionService] (MANAGER.302) The system will periodically delete stale Discover incident connection records. A connection record is stale when it is older than 90 days, a period determined by the com.vontu.manager.system.IncidentDeletion.StaleStorageConnectionRecordAgeInDays property in Manager.properties.

NFO [com.vontu.manager] Incident deletion started. Incident deletion started

INFO [com.vontu.manager] Incident deletion completed. Incident deletion ran for 1 second(s) 0 ms and deleted 0 incident(s)

WARNING [com.vontu.enforce.domainlayer.events.system.SystemEventLogger] Over 1000000 incidents currently contained in the database. Persisting over 1000000 incidents can decrease database performance

SEVERE [com.vontu.manager.spring.web.ManagerHandlerExceptionResolver] Unexpected exception while processing AJAX request:

Cause:

org.apache.catalina.connector.ClientAbortException: java.net.SocketException: Connection reset by peer: socket write error

java.net.SocketException: Connection reset by peer: socket write error

org.apache.catalina.connector.ClientAbortException: java.net.SocketException: Connection reset by peer: socket write error

Cause

An Oracle db trigger was configured to prompt for a logon.

Resolution

Disabled the Oracle db trigger that was prompting for a logon.

Additional Information

How to check for logon triggers in Oracle:

select * from dba_triggers where triggering_event like '%LOGON%';