DLP Enforce : Deleting incidents does not reduce external attachment disk space

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

DLP Enforce : Deleting incidents does not reduce external attachment disk space

Environment

All DLP versions

Cause

Error in the IncidentPersister service logs

Level: WARNING
Thread: 98
Source: com.vontu.incidenthandler.blob.delete.ExternalizedMessageBlobCleanupService.deleteExternalizedMessageBlob
Message: Exception while trying to delete blobs from External Storage.
java.lang.OutOfMemoryError: Java heap space

Resolution

Increase the Java max heap size for IncidentPersister service.

• Symantec DLP Incident Persister service on Enforce:
  1. Increase the wrapper.java.maxmemory value in:
     Windows: C:\Program Files\Symantec\DataLossPrevention\EnforceServer\Services\SymantecDLPIncidentPersister.conf or
     Linux: /opt/Symantec/DataLossPrevention/EnforceServer/Services/SymantecDLPIncidentPersister.conf
  2. Restart the Symantec Incident Persister service.