McAfee DLP incident manager

[Yaniv_Yosifov]

Hi All,

it would be great for helping me out. 

we are connecting directly to DB from our SIEM

kindly advise what table is for DLP incident manager for grubbing the id incident and compare it in the SIEM.

THANKS, 

[Hem]

Moved to DLP team.

[jsubbura]

Hi @Yaniv_Yosifov ,

Thank you for writing in here.

Can you open up a support ticket so that we can help you with the DB tables information for your reference and DLP Incident details are not present only in one table, so it would be wise we share you the DB table information for your reference over the support ticket as it cannot be shared on the community forum for security reasons.

To answer your question: Incident ID details can be fetched from UDLP_Incidents table.

Thank you.

[Corey-DLP]

KB90391 contains information regarding the DLP 11.x database schema which may also be helpful.