Endpoint discover scans remain in "Starting" state

Products

• Data Loss Prevention Endpoint Discover

Issue/Introduction

Endpoint Discover scans start, but remain in"Starting" state for an extended period of time unexpectedly.

Environment

DLP 15.x

Endpoint discover 

Cause

Endpoint discover scans run serially on the endpoint agents. Therefore if a scan is already running on an agent and that agent is also a part of another scan target, the subsequent scans will stay in "Starting" state until the first scan has completed on the agent.

It is necessary to review the scan target configuration to ensure that the agents are unique to that particular scan target to avoid this kind of a situation. Also, if only the Endpoint servers are specified in the scan target without any agents, the scan will be triggered on all the agents reporting to those particular endpoint servers. Thus, other scan targets which has the same set of agents will cause the given scan to remain in "Starting" state until the first scan completes.

Resolution

This behavior is by design. Ensure that no existing scan is running on the agent before initiating another scan.