|Applies To||RSA Product Set: DLP|
RSA Product/Service Type: Endpoint
RSA Version/Condition: 9.6 SP2
Platform (Other): null
O/S Version: 2008 Server R2 x64
Product Name: null
Product Description: null
|Issue||There are several orphan events as a result of DLP Data Center Scan.|
These events are also know as un-mapped events.
It is not possible to map, the events and create an incident. The best option is to delete the orphan events by running a purge from the EM UI.
|Resolution||Steps to run purge.|
Check with DBA to make sure there is sufficient space for the transaction log
Start with small time window. (example last 5 days)