Symantec Data Loss Prevention (DLP) Enforce
If you have database issues and need the SQL queries to send to engineering for diagnosis, you can enable SQL Query (manager_jdbc.log) logging.
To enable SQL Query logging in the Manager (Supported versions):
Once JDBC logging is enabled, go into the UI and perform any task that you need to capture the SQL queries on i.e., run reports, select incidents etc.
Any SQL statement not executed through OJB will be logged to
Windows Path: \ProgramData\Symantec\DataLossPrevention\EnforceServer\15.x\logs\debug\manager_jdbc_y.log
Linux Path: /var/log/Symantec/DataLossPrevention/EnforceServer/15.x/debug/manager_jdbc_y.log
where x is the DLP version
and y is the log number
along with the time it took to execute the statement.
After performing this test:
If you make any logging changes through the console (System >> Servers and detectors >> Logs >> Configuration tab) you will create a new ManagerLogging.properties file in the LoggingOverwrite directory. That will overwrite the logging configuration.
Note - Same changes can be done to "IncidentPersisterLogging.properties" file to generate "IncidentPersister_jdbc_x.log" file. After making changes to "IncidentPersisterLogging.properties" file, please restart "SymantecDLPIncidentPersister" service to apply changes.