search cancel

Incident Persister will not start and/or inc files in the incident folder stop processing.

book

Article ID: 230456

calendar_today

Updated On:

Products

Data Loss Prevention

Issue/Introduction

Although the incident persister previously worked, it suddenly stops processing incidents and/or the process will not start.

An error related to java service wrapper may be seen. Other errors indicating memory or other issues are not found.

 

Environment

Enforce DLP servers. All versions that use an Incident Persister configuration file and/or wrapper configuration.

Cause

The configuration file SymantecDLPIncidentPersister.conf has changed.

One indication is the file date has changed and/or is different than expected on the SymantecDLPIncidentPersister.conf.

Specifically, one of the application parameters no longer exists as expected.

Resolution

Edit the SymantecDLPIncidentPersister.conf file.

Assure that the com.vontu.incidenthandler.IncidentPersister wrapper.app.parameter exists (usually as wrapper.app.paramenter.1 setting.)

There may be more than one parameter with the setting.

In the section:

# Application parameters.  Add parameters as needed starting from 1

Assure this setting is in place:


wrapper.app.parameter.1 = com.vontu.incidenthandler.IncidentPersister