cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

how to create a scheduled content Copied Report for DLP 10.0.260.42 in server task ?

Earlier I use to have DLP 9.3 for creating above mentioned Report. After Upgrading DLP to 10.0.260.42, am confused how to configure scheduled task in server task.

My Epo Details;

EPO  - 5.3.2

MA    - 5.0.4.283

VSE  - 8.8.0.1599

HIPS - 8.0.0.3828

FRP  - 5.0.2.167

DLP - 10.0.260.42

Please send me solution/Suggestion to configure this task.

1 Reply
Reliable Contributor chrisnlc
Reliable Contributor
Report Inappropriate Content
Message 2 of 2

Re: how to create a scheduled content Copied Report for DLP 10.0.260.42 in server task ?

It's not 100% clear what you asked for but I'll assume you wish for a regular emailed report on files users copied to removable storage?

So I don't think the ePo task mechanics changed between 9.3 and 10 but the setup is as follows:

The query is configured as: New Query, Others, DLP Data In-use/motion Incidents.

Chart Type - List/Table

Columns - Include at least Computer, User name, Destination, Evidence File Path, (Occurred Endpoint)

Filter - You should configure Rule Name (One Of) = the rule names you use to monitor copied files to removable storage.

Save this and run it to see if it matches your requirements.

Create a new epo task that should run that new query (Actions: Run Query) with a sub-Task of Email file with the subject and recipients configured how you wish.

Schedule this task to run end of day/week or whatever you like.

hope that helps!

_Chris.