McAfee Data Loss Prevention 9.2.2 Product Guide

7Using the Incidents dashboardGetting incident detailsTask1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select an incident and click Details.The Incident Details page appears.3 View the Concepts section in the Related Incidents tab.Find match stringsFind the match string that triggered the incident by clicking Details to launch the Incident Details page. Thepage displays the alphanumeric strings defined in the concept, rule or query.If you cannot see incident details, you will need View Incident Object permission. See your administrator.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select an incident and click Details.The Incident Details page appears.3 You can find the alphanumeric string in the Match String tab.Set incident statesIncidents might already share some of the same states, but if not, they can be assigned directly fromthe dashboard by clicking the Attributes button. You can set them from the Incident Details or Incident Listpages.Before you beginStates are referred to as attributes in the user interface, but that term generally refers tocharacteristics that define a database object.The states available for modification are Status, Status, Reviewer, Resolution, Severity, and Comments.If you do not have permission to view a state, it will not be displayed for modification.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select one or more incidents whose attributes you want to modify.180 McAfee Data Loss Prevention 9.2.2 Product Guide