EDPA shuts down no crash dump available.

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

EDPA has stopped with no crash dump created. Issue may have been uncovered due to a data exfiltration investigation or otherwise investigating non-reporting DLP agents. 

 

Environment

Error found in the DLP logs:
| INFO | Service | EDPA service stopped by 

with no further explanation. 

Cause

The error " | INFO | Service | EDPA service stopped by ", where "stopped by" is blank, occurs when the windows OS is shut down, This causes the OS to terminate the service, resulting the the aforementioned log entry. 

Resolution

The log entry is likely not a cause for concern as the service should automatically start up again, even if the OS shutdown was averted.