How To Archive, Restore, and Delete DLP Incident Partitions
- Article Number: 000004266
- Products: Forcepoint DLP
- Version: 8.7, 8.6, 8.5, 8.4
- Last Published Date: June 17, 2020
Notes & Warnings
Important Deleting a partition is irreversible.
Ensure that the Temporary File Location for backup and archival has been configured properly in the DLP installer before performing these steps.
How do I manage old unwanted incidents? They are causing reports to generate slowly as well as filling up the local drive with forensics.
Every quarter, a new partition is created to store incidents by default. These partitions may be archived or deleted to free up space. When an archival of a partition is performed, the SQL tables for the partition are backed up and detached from the wbsn-data-security database. This is then transferred to the archive folder destination as a ZIP archive. In addition, the forensics from the Forensics Repository that correspond with this date range are also moved to the archive folder location in an uncompressed form.
Keywords: DLP Data Security Manager; DLP Partition Archive; Archive Restoration; Triton Installer Modify; DLP Archiving Issue; DLP Restoration Issue; Low Disk Space; Server Out of Space; Forensics Repository