ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Cannot Export more than 10,000 incidents from the Enforce console

book

Article ID: 226447

calendar_today

Updated On:

Products

Data Loss Prevention

Issue/Introduction

You need to export incidents from the Enforce console via the web archive button, but you find there is a threshold of 10,000 incidents above which you can't initiate the export.
You want to know if there is a way to increase the threshold

Environment

Release : 15.8, 15.7

Component : Enforce server/console

Resolution

  • This threshold can be controlled in the manager.properties file located in the \Symantec\DataLossPrevention\EnforceServer\<version>\Protect\config folder on the enforce server.
  • You can change this from the default 10,000 to a higher value, but the limit is there to prevent potential memory issues when exporting very large incidents, so be cautious in increasing the limit.
  • Note that you will need to restart the Symantec DLP Manager service on the Enforce server before the changes you make will take affect.