Data Loss Prevention

We're running DLP 14.0.2 with only network monitoring.  We have set up nightly cold backups for the oracle database which is an a seperate box from the Enforce server.  Tasks are scheduled so that the services shut down before the backup starts and come back up about 30 minutes after it finishes.  However what we have been seeing is that the backup has been running past midnight and so when the services come back up they fail to make connection with the database and therefore the web interface is unavailable in the morning.  

It turned out that the incidents in the database needed to be pruned so I went and selected the incidents to be deleted thinking that this should then bring the backups within the desired frame.  However we still see this continuing to happen and it dawned on me that the incident deletion job by default kicks off at midnight.  If the backup is running past midnight is the incident deletion job  not running?

You can change the schedule for Incident deletion at System > Incident > Incident Deletion. In this case, just make it delete at 10pm if it's taking awhile - though normally it shouldn't take long unless you're deleting tens of thousands of incidents.

Alternatively, I'd probably just do hot backups instead using RMAN, so you don't have to shut down services... RMAN is also more stable than say, data pump (expdp/impdp). Guide can be found https://docs.oracle.com/cd/E11882_01/backup.112/e10642.pdf