search cancel

DLP 15.8 Event Code 1214 appears

book

Article ID: 211814

calendar_today

Updated On:

Products

Data Loss Prevention

Issue/Introduction

Symantec Data Loss Prevention (DLP)

After upgrading DLP to 15.8,  "Event Code 1214" error shows up.

This happens for any policy containing a regex rule.

The FileReader log has these entries:

Class: com.vontu.detection.regex.RegexMatcherCore
Method: logRegexConditionDistributionInfo
Level: WARNING
Message:  Following regular expression rules are invalid :  Condition ID : XXX Condition ID : XXX

Class: com.vontu.detection.regex.RegexMatcherCore
Method: logRegexConditionDistributionInfo
Level: WARNING
Message:  Following regular expression rules are invalid :  Condition ID : XXX

 

Environment

Release : 15.8

Component : Detection

Resolution

Upgrade to 15.8 MP1

This error does not cause any operational issues.
The policy will still detect and generate incidents if data matches are found.