Error "Custom attribute lookup failed" in DLP

Products

• Data Loss Prevention
• Data Loss Prevention Enforce

Issue/Introduction

Symantec Data Loss Prevention (DLP)

The Enforce incident queue is backlogged the system events lists error code 1234 with the following message

Failed to instantiate lookup plug-in com.vontu.lookup.script.ScriptLookup. It was unloaded. Error message: Script Lookup Processing Error 

Cause

The incident persister log contains the following message:

<date/time> (SEVERE) Thread: 730 [com.vontu.lookup.script.ExecLauncher.launch] Failed to execute script.
com.vontu.lookup.script.ScriptLookupException: Cannot run program "C:\SymantecDLP\jre\bin\java.exe": CreateProcess error=2, The system cannot find the file specified

Resolution

From the Enforce console, navigate to System > Incident Data > Lookup Plugins > then click on the plugin. Update the path for the script command that failed to execute.