Viewing Data Loss Prevention Logs Parent topic

Procedure

  1. Navigate to Networked Computers → Client Management or Logs → Networked Computer Logs → Security Risks.
  2. In the client tree, click the root domain icon (icon_root-8.bmp) to include all clients or select specific domains or clients.
  3. Click Logs → Data Loss Prevention Logs or View Logs → DLP Logs.
  4. Specify the log criteria and then click Display Logs.
  5. View logs. Logs contain the following information:
    • Date/Time digital asset transmission was detected
    • Computer where transmission was detected
    • Domain of the computer
    • IP address of the computer
    • The process that facilitated the transmission of a digital asset. The process depends on the channel. For details, see Processes by Channel.
    • Channel through which the digital asset was transmitted
    • Action on the transmission
    • Template that triggered the detection
    • User name logged on to the computer
    • Destination to which the digital asset was transmitted
    • Description, which includes additional details about the transmission. For details, see Descriptions.
  6. To save logs to a comma-separated value (CSV) file, click Export to CSV. Open the file or save it to a specific location.