Enforce Server : Corrupted incident received / Unable to start Oracle service

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Enforce

Issue/Introduction

Enforce Server: Corrupted incident received / Unable to start Oracle service

Incidents are not being persisted in the DB.

Enforce services do not work properly.

Environment

All DLP Versions, Oracle.

Cause

Error in IncidentPersister logs:

Caused by: Error : 1115, Position : 0, Sql = INSERT INTO IncidentAction (incidentActionID,incidentID,actionType,actionDate,actionUserID,actionDetail,isInternationalized) VALUES (:1 ,:2 ,:3 ,:4 ,:5 ,:6 ,:7 ) , OriginalSql = INSERT INTO IncidentAction (incidentActionID,incidentID,actionType,actionDate,actionUserID,actionDetail,isInternationalized) VALUES (?,?,?,?,?,?,?) , Error Msg = ORA-01115: IO error reading block from file  (block # )
ORA-01110: data file 27: '\ORACLE\ORADATA\PROTECT\USERS18.DBF'
ORA-27070: async read/write failed
OSD-04006: ReadFile() failure, unable to read from file
O/S-Error: (OS 23) Data error (cyclic redundancy check).

Resolution

Oracle Database is unable to access the DBF file.

This is caused by a failing disk or other hardware issues, recommend performing a disk/hardware review for corruption.