No new incidents in Risk Fabric console

Products

• Information Centric Analytics

Issue/Introduction

The Information Centric Analytics (ICA) console displays no new incidents from Symantec Data Loss Prevention (DLP) and displays no new or updated risk scores for users or other entities. The nightly RiskFabric Processing job is running to completion successfully, with no failures on any steps, and the RiskFabric Intraday Processing job may also be running successfully.

Environment

Version : 6.x

Cause

The DLP database was rebuilt or restored, resulting in the generation of new incident IDs. Because the values of these new IDs are less than the watermark values stored for the integration, no new DLP data are imported into ICA.

Resolution

Contact Broadcom technical support for assistance with resetting the watermark values for the DLP integration.