Scheduled Incident Summary

Configure the following event notification to send administrators a summary of the DLP incidents that occurred on your network.

  1. Go to Detections > Notifications > Event Notifications.

    The Event Notifications screen appears.

  2. Click Data Loss Prevention.

    A list of events appears.

  3. In the Event column, click Scheduled incident summary.

    The Scheduled Incident Summary screen appears.

  4. Specify the following notification settings.

    Criteria

    Description

    Frequency

    Select to receive notifications on a daily or weekly basis.

    Attach incident details

    Select to attach incident logs to the notification.

    • Select the content that DLP Compliance Officers receive:

      • Incidents from all managed users

      • Incidents from direct reports only

      Note:

      DLP Incident Reviewers can only receive incidents from direct reports

    • Select the format of the log details
  5. Enable one or more of the following notification methods.

    Method

    Description

    Email message

    To customize the email notification template, use supported token variables or modify the text in the Subject and Message fields.

    For more information, see Standard Token Variables and Data Loss Prevention Token Variables.
  6. To test if recipients can receive the event notification, click Test.
  7. Click Save.
Parent topic: Data Loss Prevention Events