cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

DLP Incident Export Question

Jump to solution

Hi,

I am working on a DLP exercise, and there is a requirement to export.  From the Incident History, I can select all the events I wish to export.  The export creates a .CSV with a list of the incidents and some information, and then points to an HTML file with more detailed information for each incident.  Is there any way to modify this behavior?  The .CSV is lacking essential details that the html files contains, such as username.  I would really like to have ALL the detailed information in the CSV so that I can parse it in another utility that aggregates log files. 

 

Thanks,

Roger

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: DLP Incident Export Question

Jump to solution

Hello Roger,

Thank you for choosing McAfee Support Community

 

May i know which query are you using?

I have tried using the following steps and it works

Queries and Reports-> New query-> Database type as DLP->DLP Data In-use/motion Incidents History-> Chart type as Table->Add column "User Principal Name"-> Add necessary filter and then export as CSV.

It listed the user principal name in the report.

 

Was my reply helpful?If you find this post useful, Please give it a Kudos!

 

Please don't forget to select "Accept as a solution" in my reply and together we can help other members?

 

Regards

Avinash R

Data Protection

McAfee Employee

View solution in original post

3 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: DLP Incident Export Question

Jump to solution

Hello,

 

Thank you for choosing McAfee Support Community

I tried to export two incidents and two different HTML file with resepective incident was generated which is as per the design.

 

Also i am able to see the username(User Principal Name) in the report too.

Please find the attached screenshot from my test ePO

Was my reply helpful?If you find this post useful, Please give it a Kudos!

 

Please don't forget to select "Accept as a solution" in my reply and together we can help other members?

 

Regards

Avinash R

Data Protection

McAfee Employee

Highlighted

Re: DLP Incident Export Question

Jump to solution

Avinash,

The additional details are contained in the HTML files, not in the .CSV.  I was looking for a solution that additional  (or all) the details of the incident could be contained in the .CSV.  For instance, the username is not in the .csv.

 

Roger

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: DLP Incident Export Question

Jump to solution

Hello Roger,

Thank you for choosing McAfee Support Community

 

May i know which query are you using?

I have tried using the following steps and it works

Queries and Reports-> New query-> Database type as DLP->DLP Data In-use/motion Incidents History-> Chart type as Table->Add column "User Principal Name"-> Add necessary filter and then export as CSV.

It listed the user principal name in the report.

 

Was my reply helpful?If you find this post useful, Please give it a Kudos!

 

Please don't forget to select "Accept as a solution" in my reply and together we can help other members?

 

Regards

Avinash R

Data Protection

McAfee Employee

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community