McAfee Data Loss Prevention 9.2.2 Product Guide

7Using the Incidents dashboardSet up incident views4 Set an owner.Ownership is determined by the groups to which a user belongs. If the group needed is not listed,add a new one and assign a user to it.5 If you want this to be your landing page, select the Set as Home View checkbox.6 Click Save.Select pre-configured viewsPre‐installed views display incidents in a wide variety of configurations.This is a good way to figure out how to filter your incidents into the most significant data patterns.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select any view from the Incident Listing menu and review the results.Select view vectorsSelect view vectors to display incidents from three different databases.Table 7-3 View vectorsVectorData‐at‐RestData‐in‐MotionData‐in‐UseDatabaseStatic data found in network file systems or databasesDynamic data found in network trafficStatic data found at network endpoints (computers, removable media, printers, etc.)Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select Data‐at‐Rest, Data‐in‐Motion, or Data‐in‐Use from the view vector menu.Select graphical viewsSelect from the default graphical views to display incidents in configurations that can be understood ata glance.Use these views to get ideas on how to display your incidents graphically.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Click the Group Detail or Summary icons and review the results.182 McAfee Data Loss Prevention 9.2.2 Product Guide