Integrity constraint (PROTECT.INCIDENT_FK1) violated - parent key not found

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

the incidents directory is filling with .bad files, and the incident persister logs are filling with ORA-02291 errors on the index PROTECT.INCIDENT_FK1

Environment

Release : 15.8

Component : Default-Sym

Cause

Error message seen in logs

Message: 
* SQLException during execution of sql-statement:
* sql statement was 'INSERT INTO Incident (incidentID,messageID,policyID,policyVersion,incidentStatusID,violationCount,detectionDate,policyGroupID,customAttributesRecordID,isDeleted,blockedStatus,incidentSeverityID,messageType,discoverItemID,discoverMillisSinceFirstSeen,creationDate,dataOwnerID,dataOwnerEmailID,isBlockedStatusSuperseded,shouldHideFromReports,shouldOverrideHideFromReports,messageSource,messageDate,discoverViolationID) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) '
* Exception message is [ORA-02291: integrity constraint (PROTECT.INCIDENT_FK1) violated - parent key not found

Resolution

the index "Incident_FK1" is for the policyid. The incident(s) being posted have policy ID values that do not exist in the database.