DLP Custom Lookup plugin fails when autorun but works when the lookup button is manually pressed
Article ID: 213768
Updated On:
Products
Issue/Introduction
Attributes for endpoint incidents are not displaying:
localhost Log
FINE [com.vontu.manager.command.systemevent.SystemEventCommandTrigger] Fired trigger for System Event: systemEventID: [number], eventCode: 2115, severity: 3, eventDate: Fri Apr 23 15:33:07 2021, informationMonitorID: -1, summary: com.vontu.manager.admin.attribute.lookup_failed.summ, description: com.vontu.manager.admin.attribute.lookup_failed.desc, isInternationalized: 1,
IncidentPersister. Log
(WARNING) Thread: 9721 [com.vontu.lookup.script.ExecCommand.execute] Process exit value indicates error in execution. Exit value: 1 for command: C:/Python/Python39/python.exe
(SEVERE) Thread: 9721 [com.vontu.lookup.script.ExecLauncher.launch] Failed to execute script.com.vontu.lookup.script.ScriptLookupException: [['E:/SymantecDLP/EnforceServer/15.7/Protect/plugins/scripts/Lookup.py', 'password=xxxxxxxxx', 'username=[customer username]', 'Email=null', 'file-modified-by=null', 'RiskChampion=null', 'subject=RE: [specific Email]', 'file-owner-email=null', 'sender-port=xxxxxxx', 'ManagerEmail=null', 'Cost_Center=null', 'endpoint-file-path=null', 'Manager=null', 'isActive=null', 'Term_Date=null', 'BBNumber=null', 'path=null', 'protocol=SMTP', 'Department=null', 'discover-repository-location=null', 'endpoint-file-name=null', 'Area_Name=null', 'LOB=null', 'IMSID=null', 'Postal Code=null', 'ColleagueID=null', 'StaffNumber=null', 'Heads_Of=null', 'discover-server=null', 'discover-extraction-date=null', 'discover-content-root-path=null', 'Assigned To=null', 'On_Leave=null', 'Area=null', 'Triage 1=null', 'Country=null', 'LastName=null', 'District=null', 'date-sent=Fri Apr 23 15:32:42 2021', 'endpoint-volume-name=null', '[email protected]', 'Resolution=null', 'Group=null', 'ManagerPhone=null', 'data-owner-email=null', 'endpoint-domain-name=null', 'incident-id=xxxxxx', 'endpoint-user-name=null', 'Dismissal Reason=null', 'endpoint-machine-name=null', 'sender-ip=null', 'Phone=null', 'date-detected=Fri Apr 23 15:32:54 2021', 'file-created-by=null', 'RiskInSite Reference=null', 'Division=null', 'Team=null', 'discover-name=null', 'endpoint-dos-volume-name=null', 'endpoint-application-name=null', 'file-owner=null', 'discover-location=null', 'Is_Manger=null', 'FirstName=null', 'file-create-date=null', 'ManagerMobile=null', 'Title=null', 'plugin-chain-id=0', 'Mobile=null', 'Section=null', 'file-access-date=null', 'incident-remediator-name=null', 'incident-remediator-email=null', 'PersonalTitle=null', 'data-owner-name=null', 'file-owner-domain=null', 'Surname=null', 'endpoint-application-path=null', 'Location=null']] at com.vontu.lookup.script.ExecCommand.execute(ExecCommand.java:113) at com.vontu.lookup.script.ExecLauncher.launch(ExecLauncher.java:137) at com.vontu.lookup.script.ScriptLookup.invokeScript(ScriptLookup.java:116) at com.vontu.lookup.script.ScriptLookup.lookupAttributeValues(ScriptLookup.java:71) at com.vontu.enforce.workflow.attributes.CustomAttributeLookup$1.call(CustomAttributeLookup.java:443) at xxxxxxxxxx.util.concurrent.FutureResult$1.run(FutureResult.java:75) at com.vontu.util.concurrent.TimedCallablePool$Worker.run(TimedCallablePool.java:414)
(SEVERE) Thread: 86 [com.vontu.enforce.workflow.attributes.DeferredUpdateLookupRequest.doLookup] Script Lookup Processing Errorcom.vontu.api.incident.attributes.AttributeLookupException: Script Lookup Processing Error at com.vontu.lookup.script.ScriptLookup.lookupAttributeValues(ScriptLookup.java:75) at com.vontu.enforce.workflow.attributes.CustomAttributeLookup$1.call(CustomAttributeLookup.java:443) at xxxxxxxxxx.util.concurrent.FutureResult$1.run(FutureResult.java:75) at com.vontu.util.concurrent.TimedCallablePool$Worker.run(TimedCallablePool.java:414)Caused by: com.vontu.lookup.script.ScriptLookupException: Failed to execute script. at com.vontu.lookup.script.ExecLauncher.launch(ExecLauncher.java:172) at com.vontu.lookup.script.ScriptLookup.invokeScript(ScriptLookup.java:116) at com.vontu.lookup.script.ScriptLookup.lookupAttributeValues(ScriptLookup.java:71) ... 3 more
Environment
Release : 15.x, 16.x
Component : Enforce
Cause
Failed to execute Python 3.9 custom attributes script.
Resolution
A Full Reboot of Enforce Server cleared the python script errors and the custom attributes python script was working automatically as expected upon reboot of Enforce server.
Feedback
