You want to convert LOB incidents to external storage after the installation of DLP is completed.
Release : All currently supported DLP versions
Component : Enforce
To configure external storage for incident attachments
1. On the Enforce Server host, open the following file in a text editor:
Microsoft Windows: \Program Files\Symantec\DataLossPrevention\EnforceServer\15.8\Protect \config\Protect.properties
Linux: /opt/Symantec/DataLossPrevention/EnforceServer/15.8/Protect/config/Protect.properties
2. Enable incident attachment external storage: com.symantec.dlp.incident.blob.externalize=true
3. Specify the path to the external storage directory: com.symantec.dlp.incident.blob.externalization.dir=
4. Save the file.
5. Restart the SymantecDLPManagerService and SymantecDLPIncidentPersisterService services.
To disable external storage for incident attachments If you choose to disable incident attachment external storage, be sure to preserve the setting that specifies the path to the external storage directory to ensure that the Enforce Server retains access to the incident attachments.
1. On the Enforce Server host, open the following file in a text editor:
Microsoft Windows: \Program Files\Symantec\DataLossPrevention\EnforceServer\15.8\Protect \config\Protect.properties
Linux: /opt/Symantec/DataLossPrevention/EnforceServer/15.8/Protect/config/ Protect.properties
2. Disable incident attachment external storage: com.symantec.dlp.incident.blob.externalize=false
Do not change or delete the parameter specifying the path to the external storage directory.
3. Save the file.
4. Restart the SymantecDLPManagerService and SymantecDLPIncidentPersisterService services.
Troubleshooting Destination Paths:
Error 1758 When attempting to enable incident externalization
See also Changing the incident blob externalization directory to change from your current external storage location.