Incidents show classification hits with evidence, but no match count(hits)

[atylerblack]

Has anyone noticed this issue at all? A incident will be created for meeting a classification, save a evidence file, but will have no match count.

I've downloaded some of the evidence files (usually .txt or .tmp) and tested them using the hdlp diagnostics tool and it doesn't show any hits for classification. I'm guessing a support ticket will have to be created, but thought I'd try my luck here to see if this is a common issue.

[chrisnlc]

Depends what type of classification you are using. From reading between the lines you're expecting a contentt based match which yields text match count.
If you have other types such as matching file extension then you'll have evidence count etc but no match count since the trigger is not a text match.

Dont know if that applies to your rules but thought it may be helpful.

thanks

_Chris.

[Team_ICT]

Did anyone solve this issue?

[Team_ICT]

We have the same problem. Classification is triggered with evidence but no match count. The classification is based on two keywords “confidential” and “secret” and that’s all, no tagging, manual classification or registered documents.

When incident is triggered evidence is there,zero match count, there is no keyword in evidence (document) and still under classification in brackets is word “(tag)”.

apperantly something is wrong… any idea?

[rizwaangani]

Has this been solved as i am experiencingthe same issue currently.