McAfee Data Loss Prevention 9.2.2 Product Guide

7Using the Incidents dashboardSort incidentsSort incidents by policyFind policy violations by selecting the incidents in the display pane, then viewing the policy and rulenames displayed in the navigation pane.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select one of the policies listed in the Group by frame. The incident listing displays only incidentsfound by that policy.Violations are grouped by policy by default.Delete incidentsDelete incidents that are not useful to clear the display pane for significant results.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select the checkboxes of incidents to be deleted.3 From the Actions menu, select Delete.Delete similar incidentsDelete similar incidents if they are no longer useful, or if they share attributes that trigger falsepositives.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Click on a column header that identifies the attribute shared by the false positive incidents.3 Select the checkboxes of incidents that share the attribute.4 From the Actions menu, select Delete.176 McAfee Data Loss Prevention 9.2.2 Product Guide