A yellow banner stating "There was an error highlighting the violating text in the incident" is displayed on the Enforce console for endpoint incidents.
The localhost logs have the below errors:
Thread: 135
Level: WARNING
Source: com.vontu.manager.report.snapshot.IncidentDetailPage
Message: (MANAGER.200) Error generating match highlighting for incident 102,778, incident detail will be rendered without them
Cause:
com.symantec.dlp.incidentdomainservices.matching.MatchHighlightingException: Error marking violating content for incident 102778com.symantec.dlp.incidentdomainservices.matching.MatchHighlightingException: Error marking violating content for incident 102778
at com.symantec.dlp.incidentdomainservices.matching.MatchHighlightingService.highlightMatches(MatchHighlightingService.java:162)
at com.vontu.manager.report.snapshot.IncidentDetailPage.prepareForDisplay(IncidentDetailPage.java:174)
at com.vontu.pagebuilder.PageBuilderImpl.render(PageBuilderImpl.java:75)
...
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:890)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1743)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:750)
Caused by: java.lang.RuntimeException: Unable to generate match highlighting, requested offset [0] and span [16] which are outside the size [0] of the cracked content
at com.vontu.model.data.CrackedComponentMarker.getViolatingText(CrackedComponentMarker.java:146)
at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addSegments(CrackedComponentProcessor.java:657)
at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addMarkersInList(CrackedComponentProcessor.java:542)
at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addMarkedRecordFromText(CrackedComponentProcessor.java:529)
at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addPatternViolation(CrackedComponentProcessor.java:446)
at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addKeywordViolation(CrackedComponentProcessor.java:384)
at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.markViolations(CrackedComponentProcessor.java:196)
at com.symantec.dlp.incidentdomainservices.matching.MatchHighlightingService.highlightMatches(MatchHighlightingService.java:153)
... 364 more
DLP 16.0 MP1
Solution included in DLP 16.0 MP1 Hotfix 2 for Endpoint Agents (16.0.00102.60095).
Download file name in the Broadcom Download Portal: Symantec_DLP_16.0_MP1HF2_Agent_Win-IN.zip