Internal deletion schedule no longer running after upgrading to Oracle 19c

Products

• Data Loss Prevention Enforce
• Data Loss Prevention

Issue/Introduction

You have upgraded the DLP database to Oracle 19c. Since then you have noticed that no incidents are being deleted as viewed in the System | Incident Deleter | Delete Incidents history .

 

Environment

Release : 15.x, Oracle 19c

 

Error in Tomcat log:

Default Location:
Windows - C:\ProgramData\Symantec\DataLossPrevention\EnforceServer\<version>\tomcat
Linux - /var/log/Symantec/DataLossPrevention/EnforceServer/<version>/tomcat

File: localhost.2021-11-15.log
Date: 15/11/2021 23:59:00
Thread: 82
Level: SEVERE
Source: com.vontu.manager
Message: Incident Deletion Failed
Cause:
java.sql.SQLRecoverableException: IO Error: Checksum failjava.sql.SQLRecoverableException: IO Error: Checksum fail
{{ at oracle.jdbc.driver.T4CCallableStatement.executeForRows(T4CCallableStatement.java:962)}}
{{ at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1150)}}
{{ at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:4798)}}
{{ at oracle.jdbc.driver.OraclePreparedStatement.execute(OraclePreparedStatement.java:4901)}}
{{ at oracle.jdbc.driver.OracleCallableStatement.execute(OracleCallableStatement.java:5631)}}
{{ at oracle.jdbc.driver.OraclePreparedStatementWrapper.execute(OraclePreparedStatementWrapper.java:1385)}}
{{ at com.vontu.util.jdbc.LoggingPreparedStatement.execute(LoggingPreparedStatement.java:118)}}
{{ at com.vontu.manager.system.incident.deletion.IncidentDeletorStartQueryImpl.startIncidentDeletor(IncidentDeletorStartQueryImpl.java:67)}}
{{ at com.vontu.manager.system.incident.deletion.IncidentDeletionService.startIncidentDeletionJob(IncidentDeletionService.java:67)}}
{{ at com.vontu.manager.system.incident.deletion.scheduler.IncidentDeletorJob.execute(IncidentDeletorJob.java:51)}}
{{ at org.quartz.core.JobRunShell.run(JobRunShell.java:213)}}
{{ at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557)}}
Caused by: java.io.IOException: Checksum fail

Cause

The correct permissions have not been granted to the Oracle 19c DB.

There is an additional permission that need to granted to the DLP database user.

Resolution

Granting the CREATE JOB permission to the DLP database account (protect) on the DB resolves the issue.

Check the article Verify or Grant Oracle Database Permissions to Protect User for all permissions needed for DLP database user (protect).

This is noted in the DLP Upgrade Guide (15.7 - Lin / Win or 15.8 Lin / Win ) under the section, 'Confirming the Oracle database user permissions'.