cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
ND1
Level 7
Report Inappropriate Content
Message 1 of 1

DLP threat events vs incidents

Hi all, Please kindly help.

My understanding is that the DLP threat events differ from DLP incidents, is there any ‘link’ or ‘dependency’ for operational purposes - If for example, DLP threat events were purged after 3 months – could this purge impact any active DLP incidents (ie if a DLP incident is 6 months old, does it in any way rely on any data stored in the threat event data, or does it have its own ‘copy’ of the details).

For the sake of this example, Threat events in question is - DLP threat event  19115 – which refers to empty cd/dvd.  Apparently thi may be a bug. If I was to disable/suppress the logging this this threatevent how will it impact the incident logging as mentioned on first paragraph. 

Also is there a way to selectively reduce frequency for certain events - for example DLP threat event 19115 tells us every minute that "CD/DVD tray is empty" or something along those lines.

Can events be purged in selective manner?  For example purge events 1112  and 1113 but retain event ID 1111.  

Lastly, What is the best method to archive DLP events/incidents data?

Thanks.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community