Yellow banner - "There was an error highlighting the violating text in the incident" on the Enforce console

Products

• Data Loss Prevention Enforce

Issue/Introduction

A yellow banner stating "There was an error highlighting the violating text in the incident" is displayed on the Enforce console for endpoint incidents.

The localhost logs have the below errors:

Thread: 135
Level: WARNING
Source: com.vontu.manager.report.snapshot.IncidentDetailPage
Message: (MANAGER.200) Error generating match highlighting for incident 102,778, incident detail will be rendered without them
Cause:
com.symantec.dlp.incidentdomainservices.matching.MatchHighlightingException: Error marking violating content for incident 102778com.symantec.dlp.incidentdomainservices.matching.MatchHighlightingException: Error marking violating content for incident 102778
    at com.symantec.dlp.incidentdomainservices.matching.MatchHighlightingService.highlightMatches(MatchHighlightingService.java:162)
    at com.vontu.manager.report.snapshot.IncidentDetailPage.prepareForDisplay(IncidentDetailPage.java:174)
    at com.vontu.pagebuilder.PageBuilderImpl.render(PageBuilderImpl.java:75)
    
    ...
 
    at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:890)
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1743)
    at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
    at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
    at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:750)
Caused by: java.lang.RuntimeException: Unable to generate match highlighting, requested offset [0] and span [16] which are outside the size [0] of the cracked content
    at com.vontu.model.data.CrackedComponentMarker.getViolatingText(CrackedComponentMarker.java:146)
    at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addSegments(CrackedComponentProcessor.java:657)
    at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addMarkersInList(CrackedComponentProcessor.java:542)
    at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addMarkedRecordFromText(CrackedComponentProcessor.java:529)
    at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addPatternViolation(CrackedComponentProcessor.java:446)
    at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.addKeywordViolation(CrackedComponentProcessor.java:384)
    at com.symantec.dlp.incidentdomainservices.matching.CrackedComponentProcessor.markViolations(CrackedComponentProcessor.java:196)
    at com.symantec.dlp.incidentdomainservices.matching.MatchHighlightingService.highlightMatches(MatchHighlightingService.java:153)
    ... 364 more

Environment

DLP 16.0 MP1

Resolution

Solution included in DLP 16.0 MP1 Hotfix 2 for Endpoint Agents (16.0.00102.60095).

Download file name in the Broadcom Download Portal: Symantec_DLP_16.0_MP1HF2_Agent_Win-IN.zip