search cancel

Cannot Export more than 10,000 incidents from the Enforce console


Article ID: 226447


Updated On:


Data Loss Prevention


You need to export incidents from the Enforce console via the web archive button, but you find there is a threshold of 10,000 incidents above which you can't initiate the export.
You want to know if there is a way to increase the threshold


Release : 15.8, 15.7

Component : Enforce server/console


  • This threshold can be controlled in the file located in the \Symantec\DataLossPrevention\EnforceServer\<version>\Protect\config folder on the enforce server.
  • You can change this from the default 10,000 to a higher value, but the limit is there to prevent potential memory issues when exporting very large incidents, so be cautious in increasing the limit.
  • Note that you will need to restart the Symantec DLP Manager service on the Enforce server before the changes you make will take affect.