Slow import from DLP

Products

• Information Centric Analytics

Issue/Introduction

Step 4 (Run Staging Procedures) of the RiskFabric Processing job or RiskFabric Intraday Processing job runs for hours. The following query shows it is stuck processing agent events data from a Symantec Data Loss Prevention (DLP) database server:

SELECT * FROM RiskFabric.Log_DataTransformation WITH (NOLOCK) WHERE CAST(StartDate AS date) >= CAST(GETDATE()-1 AS date) AND StatusFlag = 'R' ORDER BY RunMinutes DESC;

Environment

Version : 6.x

Component : Symantec DLP Integration Pack

Cause

This behavior can be caused by local performance issues affecting the Oracle server hosting the DLP database.

Resolution

Restart the Oracle database server instance. If symptoms persist and you have purchased an Oracle Enterprise support agreement, contact Oracle for support. If you are running Oracle Standard Edition provided by Broadcom, contact Broadcom support for assistance.