Cache is full, flushing oldest item set warning

Products

• Data Loss Prevention Core Package

Issue/Introduction

File system scans have been running, but now appeared to stop processing.

Cause

FileReader logs indicate a warning regarding the "Cache is full."

Apr 17, 2023 9:19:20 AM com.vontu.discover.crawler.framework.catalog.CatalogItemSetCacheImpl flushOldestItemSet
WARNING: Cache is full, flushing oldest item set <File Path/Name> . This may result in loss of incremental index data. Check value of itemset_cache_size in incremental scan settings.

Resolution

The default value for the Itemset_cache_size setting is 1000.  Large datasets can cause this issue.

To increase the itemset_cache_size setting, edit the IncrementalScanMonitor.properties file:

Windows:  \Program Files\Symantec\DataLossPrevention\DetectionServer\DLPVersion\Protect\config

Linux:  \opt\Symantec\DataLossPrevention\DetectionServer\DLPVersion\Protect\config

Add the following at the bottom of the file: 

itemset_cache_size = 2000 (or whatever number is needed to resolve the "cache full" error).

It is recommended to increase the setting to represent the number of folders being scanned, to keep the folder data in cache until all files complete processing.

 

Additional Information

Restart the SymantecDLPDetectionServerService to apply the change