Unable to move the DLP agent from one group to another.
Error on Enforce console: Unable to move (1) selected agents to "groupname"
Error in localhost Logs:
File: Enforce/logs/tomcat/localhost
Date: 5/4/2022 10:39:40 AM
Thread: 59441
Level: WARNING
Source: com.vontu.manager.admin.endpoint.health.TroubleshootController
Message: Unable to move agents to selected group "groupname"
Cause:
com.hazelcast.core.HazelcastInstanceNotActiveException: Hazelcast instance is not active!com.hazelcast.core.HazelcastInstanceNotActiveException: Hazelcast instance is not active!
15.x
While we do not see any outofmemory errors in the localhost log, this error is caused due to less java heap size for the DLP Manager service.
Increase the java heap size of the DLP manager service.
1. On Enforce Server, Edit the file SymantecDLPManager.conf
Linux:
/opt/Symantec/DataLossPrevention/EnforceServer/Services
Windows:
C:\Program Files\Symantec\DataLossPrevention\EnforceServer\Services
Note: Ensure you take a backup of the SymantecDLPManager.conf file before making any changes.
2. Default value for Java Heap size in SymantecDLPManager.conf:
# Initial Java Heap Size (in MB)
wrapper.java.initmemory = 1378
# Maximum Java Heap Size (in MB)
wrapper.java.maxmemory = 2048
New values that needs to be configured:
# Initial Java Heap Size (in MB)
wrapper.java.initmemory = 2048
# Maximum Java Heap Size (in MB)
wrapper.java.maxmemory = 4096
3. After making the above changes, Restart all DLP services in order.
Restart DLP Enforce services in the correct order
4. You should be able to change the DLP agent group now without any error.