Creating DLP Auditing Logs

Administrators can use Ad Hoc Query to generate and export DLP auditing logs. Perform a log query as described in Querying Log Data and configure the following:

  • Data scope: Select Control Manager

  • Data view: Select User Access Information

  • Query criteria: Add the following activities to Custom criteria:

    • Delete DLP logs

    • Delete access logs

    • Download DLP incident file

    • Enable access log maintenance

    • Enable DLP log maintenance

    • Disable access log maintenance

    • Disable DLP log maintenance

    • Update DLP incident

    • Change DLP log maintenance setting

    • Update access log maintenance settings