ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
Cannot Export more than 10,000 incidents from the Enforce console
Article ID: 226447
Data Loss Prevention
You need to export incidents from the Enforce console via the web archive button, but you find there is a threshold of 10,000 incidents above which you can't initiate the export. You want to know if there is a way to increase the threshold
Release : 15.8, 15.7
Component : Enforce server/console
This threshold can be controlled in the manager.properties file located in the \Symantec\DataLossPrevention\EnforceServer\<version>\Protect\config folder on the enforce server.
You can change this from the default 10,000 to a higher value, but the limit is there to prevent potential memory issues when exporting very large incidents, so be cautious in increasing the limit.
Note that you will need to restart the Symantec DLP Manager service on the Enforce server before the changes you make will take affect.