Querying Logs Parent topic

  1. Navigate to Logs → Query.
    The Log Query screen appears.
  2. Select the date period or the date range of the logs.
  3. Select the log type and click Show Log.
    The results appear under the Log Query form.
    Tip
    Tip
    Clicking Filter narrows log search results by description and operators.
    Clicking the plus symbol expands the log information.
    Clicking the ID down arrow sorts the logs in ascending or descending order.
  4. Select the log and click Export.
    DLP exports the log in CSV format to a zip file for saving to your hard drive or network.
  5. Click Refresh to update the log queries with current information.
Note
Note
In FTP server mode, the DLP Endpoint agent is installed on the FTP server. In FTP client mode, the DLP agent is installed on a separate machine from the FTP server. DLP logs FTP incidents differently depending on the mode. In FTP server mode, if another machine downloads a sensitive file from the FTP server, the DLP agent logs the incident but displays the user as “NT AUTHORITY\SYSTEM.”