DIM rules are not populating the rule dropdown menu in the Data In Motion Advanced Search

book

Article ID: 210464

calendar_today

Updated On:

Products

Information Centric Analytics

Issue/Introduction

Data In Motion (DIM) policies and incidents are ingested into Information Centric Analytics (ICA), but not rules.

 

 

Cause

A logic defect was introduced in the stored procedure spLDW_UpdateSymantecDLPRules with release 6.5.2.2 HF4. Because of the way Symantec DLP handles policies and versions, either can be stored with a NULL value. spLDW_UpdateSymantecDLPRules doesn't take into account null PolicyID and null Version values, resulting in no new rules being ingested into the LDW_DIMRules table.

Environment

Release : 6.5.2.2 HF4 - HF5, 6.5.3.x, 6.5.4.x

Component : DIM

Resolution

This defect will be addressed in a future release of ICA.