You receive a notification from Data Loss Prevention that your Endpoint server has low disk space.
After reviewing the server you notice that there are over 1 million .ep.bad files located in the "Symantec\ProgramData\DetectionServer\<version>\drop\endpointTTD" folder.
In this instance, about 130+ GB of files have grown in this folder.
Missing default ignore all rule in agent configuration.
Re-add default ignore rule in agent configuration.
The aggregator uses the endpointTTD folder to pass two-tier detection requests to the FileReader.