After adding EDM's in the Enforce Console, Detection servers are stuck in a Starting status because FileReader will not start.
FileReader0.log on the Detection server shows:
SEVERE: (DETECTION.3) Failed to initialize Detection
java.lang.OutOfMemoryError: Java heap space
at java.util.Arrays.copyOf(Arrays.java:3181)
at java.util.ArrayList.grow(ArrayList.java:267)
at java.util.ArrayList.ensureExplicitCapacity(ArrayList.java:241)
at java.util.ArrayList.ensureCapacityInternal(ArrayList.java:233)
at java.util.ArrayList.add(ArrayList.java:464)
at com.vontu.detection.execution.ExecutionConditionCrossRef.addConditionRow(ExecutionConditionCrossRef.java:60)
at com.vontu.detection.execution.ExecutionMatrix.addAllConditionUseStates(ExecutionMatrix.java:98)
at com.vontu.detection.execution.ExecutionMatrix.addExecutionRow(ExecutionMatrix.java:71)
at com.vontu.detection.execution.ExecutionMatrixGenerator.generate(ExecutionMatrixGenerator.java:83)
at com.vontu.detection.ExecutionUpdater.getExecutionMatrix(ExecutionUpdater.java:147)
at com.vontu.detection.ExecutionUpdater.updateExecutor(ExecutionUpdater.java:100)
at com.vontu.detection.ExecutionUpdater.executionMatrixUpdated(ExecutionUpdater.java:80)
at com.vontu.detection.execution.ExecutionInfoBuilder.updateExecution(ExecutionInfoBuilder.java:268)
at com.vontu.detection.execution.ExecutionInfoBuilder.matrixUpdated(ExecutionInfoBuilder.java:182)
at com.vontu.detection.ExecutionMatrixUpdater.onPolicyDataChanged(ExecutionMatrixUpdater.java:81)
at com.vontu.detection.engine.impl.DetectionEngineImpl.addPolicyObserver(DetectionEngineImpl.java:184)
at com.vontu.detection.policy.PolicyManager.start(PolicyManager.java:113)
at com.vontu.messaging.FileReader.start(FileReader.java:448)
at com.vontu.messaging.FileReaderSetup.initialize(FileReaderSetup.java:110)
at com.vontu.messaging.FileReader.main(FileReader.java:324)
May 17, 2023 11:22:44 AM com.vontu.logging.LocalLogWriter write
SEVERE: File Reader failed to start. Error starting File Reader. Java heap space No incidents will be detected.
May 17, 2023 11:22:44 AM com.vontu.messaging.FileReader stop
INFO: (DETECTION.4) Detection is shutting down
Symantec Data Loss Prevention 15.8 MP3
EDM replication needs more memory than what is currently allocated to FileReader.