McAfee Data Loss Prevention 9.2.2 Product Guide

7Using the Incidents dashboardGetting incident details5 Click Apply.6 Repeat as needed until a significant data pattern is revealed.Group incidentsGroup incidents that have been reported to the dashboard into configurations that reveal significantdata patterns.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Click Group Detail.3 From the Group by menu, select a primary sorting key for the incidents on the dashboard.4 From the Group by menu, select a secondary sorting key for the incidents on the dashboard.5 Change the groups as needed until a significant data pattern is revealed.Clear filtersClear filters to release configurations that display a specific set of attributes. When incidents arefiltered, the configuration will block all other results until the filter is cleared.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Click the List button. It is the default dashboard view, so the display might not change.3 In the Filter by pane, click Clear All.4 Click Apply.Getting incident detailsThe Incident Details page provides in‐depth information about each incident or event detected by theMcAfee DLP system.View incidentsView contents of incident by clicking Details for each incident reported to the dashboard. The IncidentDetails page displays the elements that make up each incident.Incidents that are captured in real time, like chat and FTP sessions, cannot display details (like filenames and user information) because they cannot be synchronized with the existing flow.If you cannot see incident details, you will need View Incident Object permission. See your administrator.178 McAfee Data Loss Prevention 9.2.2 Product Guide