CloudSOC : "Data Processing Error" during Symantec Audit Log Ingestion

Products

• CASB Audit
• CASB Gateway
• CASB Securlet SAAS
• CASB Securlet IAAS

Issue/Introduction

Users or system monitors may receive an alert stating: "We wanted to inform you that your file/archive you had recently uploaded could not be processed because: Data Processing Error"

This alert is triggered when the automated background process fails to ingest specific log files from the Cloud SWG datasource.

Environment

Symantec Audit / CloudSOC (CASB)

Cause

The error indicates a transient failure during the automated log ingestion. 

Resolution

The ingestion pipeline for Symantec Audit has an automated retry mechanism built into the system.

1. System Automatic Retry: No manual action is required. The system is designed to automatically detect failed ingestion attempts and retry the process in the background.
2. Verification:
• Verify the status of your data source within the CASB/Symantec Audit console.
• If the ingestion is listed as "Healthy" or "Completed" for the affected time period, the issue has been automatically resolved.
• If you continue to see processing errors for the same datasource over an extended period (more than 24 hours), please open a support case and provide the Datasource Id (found in the error alert) for further investigation.