McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP MonitorSearch basics 2Get search detailsThe stages of each search are recorded and displayed in the Search Details window.This display is different from search Results, which are displayed on the McAfee DLP Manager dashboard.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Search List.• On your McAfee DLP appliance, select Capture | Search List.2 Click the Details link.The stages of the search process are displayed.Get search resultsSearch results are displayed on the Data‐in‐Motion dashboard.This display is different from search Details, which are displayed in the Search List window.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Search List.• On your McAfee DLP appliance, select Capture | Search List.2 Click the Results link.The Data‐in‐Motion dashboard displays the incidents found by the search.Stop searchingYou can stop searches that are running by using the Abort function.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Search List.• On your McAfee DLP appliance, select Capture | Search List.All searches are listed in chronological order by database searched.2 Click Abort for the search you want to stop.Set up notification for backgrounded queriesSearches that take over 60 seconds automatically run in background mode, but when results areavailable, an email notification is sent to the address you provide.Click My Profile at the top of the page and type the email address.If a search is aborted, no notification is sent.After notification is set up, you must log out and log on to register the change — but you can configurethe email client to prompt you when new email comes in.McAfee Data Loss Prevention 9.2.2 Product Guide 27