The duration of the RiskFabric Intraday Processing job alternates between running per historical trends and running long. This occurs every other job run.
This condition occurs during the job's staging step when insert statements bringing data into the table Stg_SymantecDLP_AgentGroupAttributeResult pass the value '0' for the agentgroupattributeresult.ID watermark. This occurs when IDs in the source table in DLP have not incremented since the last staging run, resulting in the watermark value being set to null and all records being pulled during the next processing run, rather than an incremental pull.
Release : 6.5.4
Component : RiskFabric Intraday Processing
A code change to improve ICA's handling of this condition will be included in version 6.5.5.