How to increase Structured Data Identifier (SDI) max violations

Products

• Data Loss Prevention

Issue/Introduction

How to increase the max violation count for the Structured Data Identifier feature. 

      *What is Structured Data Identifier?

 

 

Environment

16.0+

Resolution

1. Access the Enforce console and go to "System Servers and Detectors Overview".

2. Select the detection server you want to make the change on and click into "Advanced Settings".

3. Locate the setting called "StructuredDataIdentifier.MaxViolations" - the default is set to 10.

4. Adjust to the proper setting you need, save the changes.

5. Recycle the detection server. 

Additional Information

Please note:

Although the official documentation has not been updated to note this change the word of caution still applies when modifying server advanced settings.

Advanced Detector Settings

NOTE:

Use caution when modifying these settings on a detector. Contact Symantec Support before changing any of the settings on this screen. Changes to these settings typically do not take effect until after the detector has been restarted.

There have been a few issues where customers have substantially increased these values and it has greatly increased the database usage.

You should exercise extreme caution anytime you modify server advanced settings.