Filtering the information in the report of folders at risk

To focus on specific folders at risk, you can filter the information in the report of folders at risk based on the status, policy, location, and data owner.
  1. To filter the information in the report of folders at risk
  2. To display the folders at risk, click
    Incidents > Discover
    . In the
    Discover Reports
    on the left side, click
    Folder Risk Report
    .
  3. Click
    Edit Filters
    to open the list of filter options.
  4. Select the filter options for your report.
    Filters for the folder risk report lists the filter options.
  5. At the bottom of the
    Filters
    window, click
    Apply Filters
    .
  6. After you have a custom report that is set up with selected filters, you can save it.
The following filters can be set for the report of folders at risk:
Filters for the folder risk report
Filter
Description
Incident Statuses
Based on the status filters, individual incidents are filtered out of the data and the risk score, but the folder is still visible. If all the incidents in a folder are filtered out, it is not visible.
To filter by incident status:
  • Use the drop-down to select
    Include
    or
    Exclude
    . The remainder of the steps assumes that you have selected
    Include
    which is the default.
  • Select one of the status entries from the
    All Statuses
    list.
  • Click the plus sign to move it to the
    Included Statuses
    list.
  • Repeat for any other status entries to include.
  • If you want to remove a status entry out of the
    Included Statuses
    , click the minus sign.
  • You can search for a status entry by typing a string in the box underneath the
    Include
    label. Initially, this box says "
    Search statuses
    ."
Policies
Based on the policy filters, individual incidents are filtered out of the data and the risk score, but the folder is still visible. If all the incidents in a folder are filtered out, it is not visible.
To filter by policies:
  • Use the drop-down to select
    Include
    or
    Exclude
    . The remainder of the steps assumes that you have selected
    Include
    which is the default.
  • Select one of the policies from the
    All Policies
    list.
  • Click the plus sign to move it to the
    Included Policies
    list.
  • Repeat for any other policies to include.
  • If you want to remove a policy out of the
    Included Policies
    , click the minus sign.
  • You can search for a policy by typing a string in the box underneath the
    Include
    label. Initially, this box says "
    Search policies
    ."
Locations
The location filter selects the folders to include or exclude from the display. The risk score of a folder does not change.
An
Include
section specifies the locations to include.
An
Exclude
section specifies the locations to exclude.
The method of selecting the locations to include or exclude is the same for both sections.
To filter by locations:
  • Choose whether you want an
    Exact Match
    ,
    Contains
    , or
    Starts with
    the string in the box.
  • Enter a string in the box, which can be a full path or a partial path.
  • Click the plus sign to move the selection to the list of locations to be included or excluded.
  • If you want to remove a location entry out of the list, click the minus sign.
Data Owners
The data owner filter selects the folders to include or exclude from the display. The risk score of a folder does not change.
If the folder contains other data owners, it remains in the report. An excluded data owner may appear in the top data owners list.
An
Include
section specifies the data owners to include.
An
Exclude
section specifies the data owners to exclude.
The method of selecting the data owners to include or exclude is the same for both sections.
To filter by data owners:
  • Choose whether you want an
    Exact Match
    ,
    Contains
    , or
    Starts with
    the string in the box.
  • Enter a string in the box.
  • Click the plus sign to move the selection to the list of data owners to be included or excluded.
  • If you want to remove a data owner entry out of the list, click the minus sign.