DLP Endpoint Detection Server - FileReader fails to start

Products

• Data Loss Prevention Endpoint Discover

Issue/Introduction

DLP Endpoint Detection Server - FileReader fails to start

FileReader process stays on starting state for Endpoint Prevent Servers only, other detection servers on the console do start.

Environment

DLP 16.x

Cause

Too many exceptions in a policy.

Error in the FileReader logs.

Class: com.vontu.messaging.FileReaderSetup
Method: initialize
Level: SEVERE
Message:  (DETECTION.3) Failed to initialize Detection
java.lang.ArithmeticException: long overflow
 at com.vontu.detection.dataaccessors.policy.executiontree.ExecutionMatrixMarshallableMemoryEstimator.computeRowsAndConditionUseStates(ExecutionMatrixMarshallableMemoryEstimator.java:192)
 at com.vontu.detection.dataaccessors.policy.executiontree.ExecutionMatrixMarshallableMemoryEstimator.computeApproximateMemoryInMBytes(ExecutionMatrixMarshallableMemoryEstimator.java:105)
 at com.vontu.policy.loader.execution.executiontree.integration.ExecutionTreeGenerator.generate(ExecutionTreeGenerator.java:126)
 at com.vontu.detection.ExecutionMatrixUpdater.newExecutionMatrix(ExecutionMatrixUpdater.java:94)
 at com.vontu.detection.ExecutionMatrixUpdater.onPolicyDataChanged(ExecutionMatrixUpdater.java:71)
 at com.vontu.detection.engine.impl.DetectionEngineImpl.addPolicyObserver(DetectionEngineImpl.java:198)
 at com.vontu.detection.policy.PolicyManager.start(PolicyManager.java:124)
 at com.vontu.messaging.FileReader.start(FileReader.java:473)
 at com.vontu.messaging.FileReaderSetup.initialize(FileReaderSetup.java:134)
 at com.vontu.messaging.FileReader.main(FileReader.java:343)

Resolution

Review all the policies that have been modified recently or right before the start of the issue.

Suspend the problem policy and validate FileReader starts.

Fine-tune the policy, reduce the exceptions and redeploy.