When processing DLP events, SQL CPU use is constantly 100%. The result is that events are not processed or take an unacceptable length of time to be processed.

To identify this issue, examine the ePO event parser logs. The logs can have one or more errors like this:
  
E #06112 HOSTDLPEVENT   Error processing event. Error: SP: SP_NAME, Param: @incidentId. Error: Query timeout expired. Error Code: -2147467259
 
Where SP_NAME could be one of the following values:

• UDLP_eventparser_Cloud_SP
• UDLP_eventparser_Email_SP
• UDLP_eventparser_EmailRecipient_SP
• UDLP_eventparser_NetworkShare_SP
• UDLP_eventparser_Printer_SP
• UDLP_eventparser_RemovableStorage_SP