[Archived]Cannot Export more than 10,000 incidents from the Enforce console

Products

• Data Loss Prevention

Issue/Introduction

You need to export incidents from the Enforce console via the web archive button, but you find there is a threshold of 10,000 incidents above which you can't initiate the export.
You want to know if there is a way to increase the threshold

Environment

Release : 15.8, 15.7

Component : Enforce server/console

Resolution

• This threshold can be controlled in the manager.properties file located in the \Symantec\DataLossPrevention\EnforceServer\<version>\Protect\config folder on the enforce server.
• You can change this from the default 10,000 to a higher value, but the limit is there to prevent potential memory issues when exporting very large incidents, so be cautious in increasing the limit.
• Note that you will need to restart the Symantec DLP Manager service on the Enforce server before the changes you make will take affect.