DLP 15.8 Event Code 1214 appears during Discover scans

book

Article ID: 211814

calendar_today

Updated On:

Products

Data Loss Prevention Network Discover Data Loss Prevention

Issue/Introduction

Symantec Data Loss Prevention (DLP)

After upgrading DLP to 15.8, we see "Event Code 1214" errors when a discover scan runs.

This happens for any policy containing a regex rule.

The FileReader logs has these entries:

Class: com.vontu.detection.regex.RegexMatcherCore
Method: logRegexConditionDistributionInfo
Level: WARNING
Message:  Following regular expression rules are invalid :  Condition ID : 283 Condition ID : 367

Class: com.vontu.detection.regex.RegexMatcherCore
Method: logRegexConditionDistributionInfo
Level: WARNING
Message:  Following regular expression rules are invalid :  Condition ID : 283

 

Environment

Release : 15.8

Component : Detection

Resolution

If you see this error, open a case with Broadcom/Symantec support.

This error does not cause any operational issues.
The policy will still detect and generate incidents if data matches are found.

A fix is planned for 15.8 MP1.