How CA DLP Events Are Stored

Each CA DLP event comprises metadata, written to the local CA DLP database, and a blob file (binary large object), saved on physical media:

A database entry contains the event metadata. For example, database fields specify an email’s delivery date, 'envelope' details, what policy triggers were applied, and so on.
A blob file contains the email content and any attachments, stored in CA DLP format. The blob file is written to disk and saved in the \Data folder or migrated to EMC Centera, or the IBM DB2 Content Manager.

More information: