Error code 1302: ‘FileReader failed to start - Error starting FileReader. Org/apache/activemq/ActiveMQSslConnectionFactory. No incidents will be detected.’

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

A hotfix has been applied to the DLP Detection Server and the File Reader service will not start

Environment

Data Loss Prevention 16.x

Cause

The DLP service user does not have access to the needed jars for the FileReader process to fully initialize:

 

The logs show the following error: 

 

<<Date>> <<Time>> com.vontu.messaging.FileReaderSetup initialize SEVERE: (DETECTION.3) Failed to initialize Detection

java.lang.NoClassDefFoundError: org/apache/activemq/ActiveMQSslConnectionFactory

at com.symantec.dlp.messagequeue.activemq.client.AMQClientFactory.<init>(AMQClientFactory.java:41)

 

....

 

Class: com.vontu.messaging.FileReader
Method: stop
Level: INFO
Message:  (DETECTION.4) Detection is shutting down

Resolution

The root concern in this case was the /opt/Symantec/... directory path and all nested files has the wrong group membership

for example:

SymantecDLP old_group

Once the group member ship was updated

for example

SymantecDLP SymantecDLP

Services were restarted and the server was able to come up correctly

If the above information does not allow you to resolve your concern, please open a technical support case for further assistance