Viewing Show Snippet under DLP logs throw an error message "snippets not found"

Viewing Show Snippet under DLP logs throw an error message "snippets not found"

6328
Created On 09/04/22 11:47 AM - Last Modified 12/16/22 00:46 AM


Symptom


  • When viewing Show Snippet under DLP logs on the GUI it would show an error message "snippets not found"
  • DLP log file prints errors similar to the following 
ERROR: [dlp-op-cmds] Tenant: Tenant_ID, Result: error, Message: snippets not found
ERROR: [dlp-op-cmds] Tenant: Tenant_ID, Result: error, Message: Unable to fetch snippets as data pattern is ML pattern


Environment


  • Panorama
  • Enterprise DLP plugin 


Cause


  • The behavior is that we don't show the snippet if the pattern is not regex based and the files is older than 90 days. it would be expected since we don't give snippets for ML generated regexes.


Resolution


One to make sure the two conditions are met:
  1. there is a regex pattern match 
  2. the files are no older than 90 days


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000wlTaCAI&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language