Showing results for 
Search instead for 
Did you mean: 

how to create a scheduled content Copied Report for DLP in server task ?

Earlier I use to have DLP 9.3 for creating above mentioned Report. After Upgrading DLP to, am confused how to configure scheduled task in server task.

My Epo Details;

EPO  - 5.3.2

MA    -

VSE  -


FRP  -


Please send me solution/Suggestion to configure this task.

1 Reply
Reliable Contributor chrisnlc
Reliable Contributor
Report Inappropriate Content
Message 2 of 2

Re: how to create a scheduled content Copied Report for DLP in server task ?

It's not 100% clear what you asked for but I'll assume you wish for a regular emailed report on files users copied to removable storage?

So I don't think the ePo task mechanics changed between 9.3 and 10 but the setup is as follows:

The query is configured as: New Query, Others, DLP Data In-use/motion Incidents.

Chart Type - List/Table

Columns - Include at least Computer, User name, Destination, Evidence File Path, (Occurred Endpoint)

Filter - You should configure Rule Name (One Of) = the rule names you use to monitor copied files to removable storage.

Save this and run it to see if it matches your requirements.

Create a new epo task that should run that new query (Actions: Run Query) with a sub-Task of Email file with the subject and recipients configured how you wish.

Schedule this task to run end of day/week or whatever you like.

hope that helps!


More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support
  • The McAfee ePO Support Center Plug-in is now available in the Software Manager. Follow the instructions in the Product Guide for more.