Viewing Show Snippet under DLP logs throw an error message "snippets not found"
6328
Created On 09/04/22 11:47 AM - Last Modified 12/16/22 00:46 AM
Symptom
- When viewing Show Snippet under DLP logs on the GUI it would show an error message "snippets not found"
- DLP log file prints errors similar to the following
ERROR: [dlp-op-cmds] Tenant: Tenant_ID, Result: error, Message: snippets not found ERROR: [dlp-op-cmds] Tenant: Tenant_ID, Result: error, Message: Unable to fetch snippets as data pattern is ML pattern
Environment
- Panorama
- Enterprise DLP plugin
Cause
- The behavior is that we don't show the snippet if the pattern is not regex based and the files is older than 90 days. it would be expected since we don't give snippets for ML generated regexes.
Resolution
One to make sure the two conditions are met:
- there is a regex pattern match
- the files are no older than 90 days