Viewing Data Insight incident details
Symantec Data Loss Prevention
incident lists display the individual incident records with information about the incidents. You can click on any incident to see a snapshot containing more details. You can select specific incidents or groups of incidents to modify or remediate.- To view incidents
- In the Enforce Server administration console, on theIncidentsmenu, select one of the types of reports. For example, selectDiscover. In the left navigation panel, clickIncidents-All Scans.The incident list displays the individual incident records that contain information such as severity, associated policy, number of matches, and status.
- Optionally, use report filters to narrow down the incident list. Select the custom attributes from theVeritas Data InsightManagement Server to filter or summarize the incident list.See About using custom attributes in Help.All custom attributes are all alphabetic fields. Sorting is alphabetic for the summary information for any custom attribute. For example, in a summary of the read values, the value "15" comes after "1" and before "2." Numeric filters, such as greater-than or less-than are not available for the custom attribute values that seem to be numbers or dates.
- To view more details of a particular incident, click the incident.The incident snapshot appears, displaying general incident information, matches detected in the intercepted text, and details about policy, attributes, and incident history. You can also search for similar incidents from theCorrelationstab.
- Optionally, click through the incident snapshot to view more information about the incident.The data user information fromVeritas Data Insightis in theAttributessection.
- When you finish viewing incidents, you can exit the incident snapshot or incident list, or you can choose one or more incidents to remediate.
- To view additional details about file access, you can jump directly to theVeritas Data Insightconsole.