I installed mcafee epo 4.6 and mcafee dlp 9.3, configured policy like email, screen capture, webpost ,etc.... In DLP incident manager all policy logs are showing but when i tried to open that incident it is showing evidence not aviable but I can view the evidence for one client machines which is installed my epo and dlp server. I attached screen shot for evidence view page error.jpg is client pc and error1.jpg is server machines
I have the same issue. In my case I have made upgrade from 9.2 DLP Endpoint to 9.3 on 4.6.6 ePO.
I have made the same as writen in KC https://kc.mcafee.com/corporate/index?page=content&id=KB78553&actp=LIST
Add share permissions for the ePO server computer object with full access to the evidence share.