Response rule processing failed

Products

• Data Loss Prevention Core Package

Issue/Introduction

Enforce shows the following alert:

Message
Code	1807
Summary	Response rule processing execution failed
Detail	Response rule command runtime execution failed from error: Error executing command: <varies>.

Cause

Root cause varies. Review Incident Persister logs 

Resolution

Observed root causes based on different error text:

Error Message	Remediation
The max notifications per day limit has been reached.	Within the response rule configuration, increase or remove the "Max Per Day" quantity.
No recipients specified for incident notification.	Ensure the required incident attributes used in the send e-mail response rule are populated, such as 'Manager Email'
Expected condition UUID and condition evaluation result but not found for variable: message.sender.pattern	Upgrade to DLP 16.1MP2 or later.
Unable to write to syslog: host=xxxx, port=XXX	Ensure the Syslog message is no longer than 2048 bytes.