McAfee Data Loss Prevention 9.2.2 Product Guide

Using the Incidents dashboardSet up incident views 73 Do one of the following:• If you want to modify states from the incident listing, click Attributes in the dashboard header.Select the checkboxes of the attributes to be modified, then select a new value from thedrop‐down menu and click Apply.• If you want to modify states from the Incident Details page, click Details. Select new values from thedrop‐down menus, and add optional comments.Get incident historyGet the history of an incident by clicking Details. The Incident Details page displays the actions have beentaken in the History tab.If you cannot see incident details, you will need View Incident Object permission. See your administrator.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select an incident and click Details.3 Click the History tab.Set up incident viewsPre‐configured dashboard views reflect the content of the incident and event databases. They can beselected from the Incident Listing menu, and custom views are automatically added to the list.When incidents are grouped and filtered, significant data patterns emerge. When this happens, theconfiguration can be saved so that it can be re‐used as new incidents are added over time.Attachments to incidents can be displayed if they are under 50 MB, and the number of incidents thatcan be reported is limited to 150,000. After that number is reached, chunks of supporting data arewiped, starting with the oldest incidents first.Select different views from the Incident Listing menu to get ideas about how to filter your results.Save home viewsSave home views to keep the incident configurations you find most useful. Saving effectiveconfigurations allows re‐use when new incidents are found.To save the content of a dashboard view instead of the settings, create a report.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | My Views.• On your McAfee DLP appliance, select Incidents | My Views.2 Click a view.3 On the View Properties page, name the view.McAfee Data Loss Prevention 9.2.2 Product Guide 181