Take a look at KB54645 which has some troubleshooting information. Consider searching Host DLP Monitor events by event ID [see page 92 of the McAfee Host Data Loss Prevention 3.0 for ePolicy Orchestrator 4.5 Product Guide] for the steps to search for the event you are looking for. Define a new filter for this type of "non-administrative" event, select the filter conditions and properties and save the filter name of choice.
Check the DLP 3.0 readme file - you will get your answer. It's been a known issue with this version and might get resolved with patch 1.
Workaround: Change the executing user of the event parser service to the specific domain user specified at ePO installation.
Also have a look at these:
I got a call from McAfee Tier II yesterday and they suggested the same and it worked. Shame there wasn't a KB on this as it would have saved me a lot of hassle. Appreciate your response. I can have a happy xmas now :-) All the best.
Though this issue is resolved - above link is for reference for future trouble-shooters
where do I actually find readme file for DLP 3.0.?
previously, my DLP monitor does not shows any event at all and suddenly the event appear but unfortunately It takes sometimes to show up in the DLP MOnitor (approx. 30min)..
Any idea, what's goin on with the DLP Monitor?