Incident remediation writeback to Symantec DLP fails

Products

• Information Centric Analytics
• Data Loss Prevention Core Package

Issue/Introduction

When remediating incidents from Symantec Data Loss Prevention (DLP), the new status values are not written to DLP.

Environment

Release : 6.x

Component : Symantec DLP Integration Pack

Cause

The DLP data source has been removed and restored, generating different LinkedServerID values for incidents in the LDW_DIMIncidents table. When remediating incidents generated prior to the data source being removed and restored, writeback is attempted against a non-existent linked server.

Resolution

Contact Broadcom Support for assistance.