Enforce Console Extremely Slow Since Endpoint Deployment

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention

Issue/Introduction

As the endpoint deployment has progressed the Enforce console is loading and responding extremely slowly.

We only keep 30 days of incidents in the database and offload them to a Data Warehouse daily. 
However, the endpoint policy includes a "log all email" policy which produces a large number of events,  800k+ currently in the console.

Resolution

The policy to log all the emails was overwhelming the Enforce server during business hours.
That policy was generating too many incidents and the Enforce server was struggling to keep up.
Disabling that policy resolved this issue.