McAfee Data Loss Prevention 9.2.2 Product Guide

Using the Incidents dashboardSort incidents 75 Click plus to add a filter.6 Click Apply.Find high-risk incidentsWhen you have a high volume of violations to search through, it might be difficult to find the mostsignificant ones.This case helps you to filter your results to display only the most significant incidents.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 From the Filter by | Timestamp menu, select a time frame.3 Click + to add another parameter, then select Severity | equals and type a number from 1 to 5.Alternatively, click ? and select from the Severity pop‐up menu.4 Click Apply.The incident list displays items of the selected severity.Sort incidentsThe capture engine sorts all network data and stores it in the McAfee DLP databases. Each object inthe database is defined by its attributes, which can be used as a key to rearrange the data to revealsignificant patterns.Each column on the dashboard displays a different attribute of the object in the database. The objectscan be sorted by attribute by clicking in the table header.Attachments to incidents can be displayed if they are under 50 MB, and the number of incidents thatcan be reported is limited to 150,000 per data loss vector. After that number is reached, chunks ofsupporting data are wiped, starting with the oldest incidents first.Sorting allows you to set aside results that are not immediately relevant, but might be significant at alater date. Save a view or report to revisit the data.Sort incidents by attributeYou can sort incidents that have attributes in common by clicking on a column header.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Click a column header to sort by attribute.The dashboard displays all incidents that have that attribute in common.McAfee Data Loss Prevention 9.2.2 Product Guide 175