DLP Enforce : Deleting incidents does not reduce external attachment disk space
search cancel

DLP Enforce : Deleting incidents does not reduce external attachment disk space

book

Article ID: 418978

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

DLP Enforce : Deleting incidents does not reduce external attachment disk space

Environment

All DLP versions

Cause

Error in the IncidentPersister service logs

Level: WARNING
Thread: 98
Source: com.vontu.incidenthandler.blob.delete.ExternalizedMessageBlobCleanupService.deleteExternalizedMessageBlob
Message: Exception while trying to delete blobs from External Storage.
java.lang.OutOfMemoryError: Java heap space

Resolution

Increase the Java max heap size for IncidentPersister service.

  • Symantec DLP Incident Persister service on Enforce:
    1. Increase the wrapper.java.maxmemory value in:
      Windows: C:\Program Files\Symantec\DataLossPrevention\EnforceServer\Services\SymantecDLPIncidentPersister.conf or
      Linux: /opt/Symantec/DataLossPrevention/EnforceServer/Services/SymantecDLPIncidentPersister.conf
    2. Restart the Symantec Incident Persister service.