McAfee Data Loss Prevention 9.2.2 Product Guide

Using the Incidents dashboardFilter incidents 7Filter incidentsThe capture engine sorts captured data into objects and their attributes, which are displayed in therows and columns on the dashboards.Each incident displayed on the McAfee DLP dashboard is supported by a wide range of supportingdata. So many incidents are reported that grouping and filtering is necessary to display only thosethat are significant.Filters can be added to the incident dashboard whether or not there are values in an attribute field.Click on any data cell, even if it is empty, to use the attributes of an incident as a sorting key.Set a time filter for incidentsSet a time filter to limit the incidents displayed to a relative time frame. Customized dates can also beset to define a specific time frame.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Click the List button, if necessary.List is the default dashboard view.3 From the Filter by menu, select a time frame. If you select Custom Dates, click ? to launch input fields.The time frame must not exceed the limits of the data captured. Outside of those specific limits,incidents cannot be found. For example, if you select Yesterday but your McAfee DLP appliances wereset up Today, you will filter out everything on your dashboard.4 Click Apply.Filter incidentsFilter incidents that have been reported to the dashboard into configurations that reveal significantdata patterns.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Click the List button, if necessary.List is the default dashboard view.3 In the Filter by pane, pull down the second timestamp menu to select a time frame. If you selectCustom Dates, click the ? to launch input fields.The time frame must not exceed the limits of the data captured. For example, if you select Yesterdaybut your McAfee DLP appliances were set up Today, you will filter out everything on your dashboard.4 Click + to add another sorting key.McAfee Data Loss Prevention 9.2.2 Product Guide 177