DLP: Getting Several Response rule processing execution failed Errors

Products

• Data Loss Prevention Enforce

Issue/Introduction

Getting several response rule processing execution failed errors

 

Code	1807
Summary	Response rule processing execution failed
Detail	Response rule command runtime execution failed from error: Error executing command pre processor: lock-incident.

 

Environment

Data Loss Prevention 15.x

Cause

The 1807 error occurs when a response rule is not able to execute. In this instance the specific issue is that the incident is locked by another process. 

Caused by: com.vontu.model.LockNotGrantedException: org.odmg.LockNotGrantedException: Can not lock for WRITE: com.vontu.model.data.ojb.IncidentImpl{62395812}
Caused by: org.odmg.LockNotGrantedException: Can not lock for WRITE: com.vontu.model.data.ojb.IncidentImpl{62395812}

Due to the lock the response rule was not able to execute. 

Resolution

The 1807 system alert occurred due to the incident being "locked" the first time the response rule attempted to trigger.

The response rule will re-try if the 1807 system alert occurs which can be confirmed by pulling the incident from the Enforce console.