location of shared storage (UNC) in DLP

[2452666]

Hello McAfee Team! We have changed the location of the shared storage (UNC). To do this, all files from the old storage were copied to a new location and synchronization started. Also, the location of the shared storage (UNC) in the DLP parameters has been adjusted - shared storage, and in the policy directory - data loss prevention 11.6. A forced poll of agents was also carried out to apply the policies. I ask you to suggest what needs to be changed in EPO so that previously received confirmation files have a new path shared storage locations. Thanks. Best Regards, Vladimir Tsykalov

[JaganA · Accepted solution]

@2452666 Thanks for posting here!

Please open a service request with support and ask for a SQL script to migrate evidence files to new share.

[eplossl]

There is no supported method to move Evidence from the old share path to a new one. There are some SQL scripts which can work, but doing so may damage the database and may result in errors during the cleanup process. You should, instead, move the evidence share by commissioning a new share and then letting the old data age off the old share before decommissioning the old share.