Im struggling with the reporting on DLP Monitor.
I want to create a report on all USB activity that lists the file name(s) that are being copied etc.
can anyone offer some advice please?
thanks in advance.
Here are instructions for EPO 4.5 (may differ slightly for EPO 4.0):
* You may want different columns these are just the ones that made sense to me given what you wish to query. The actual file name will be stored in the Evidence value column.
Thats because you are using EPO 4.0 and I wrote the instructions for EPO 4.5. Unfortunately I don't have DLP 3.0 implemented on an ePO 4.0 server at this time but I should be able to get the correct instructions for you. I'll repost as soon as I have them.
I found a co-worker that had DLP 3.0 implemented on ePO 4.0. These instructions should be accurate for ePO 4.0:
As before you may want to use different columns and the actual file name will be stored in the Evidence value column.
thanks again for the reply!
ive got as far as "select table", however i cannot see any of the colums! do i need to configure something within epolicy orchestrator to see these extra columns?
Either you did not select DLP Events for the report type in step 3 or you are using DLP 2.2 or lower. For questions like these you should always post the version number of ePO/DLP you are using as the instructions will differ from one version to the next. If you are using DLP 2.2 the report you are requesting cannot be done you will need to upgrade to DLP 3.0 or higher.Message was edited by: Jeremy Stanley on 1/8/10 9:32:20 AM CST