DLP Incident Trends by User Widget

This widget checks the number of DLP incident trends based on managed users. Data can be filtered by severity level, or filtered to show only the total number of incidents triggered by a specific user for a specified period of time. By default the widget displays data from all the managed products that a user's account privileges allow.


This widget only displays data for Apex Central user accounts that have been assigned Data Loss Prevention (DLP) user roles.

For more information about reviewing DLP incidents and configuring DLP user roles, see https://docs.trendmicro.com/en-us/enterprise/apex-central-saas/dlp_incidents.

Use the Range drop-down to select the time period for the data that displays.

Click the sections from the graph to open the Incident Information screen and review the summary of incidents.

Click the widget settings icon on the widget to access additional settings.




Specify a new and meaningful title for the widget in the field.


Specify the time range when the DLP incidents were triggered.


Specify the data scope displayed by the widget.

  • Directly managed users

  • All managed users: Data is collected from both directly managed users and people under the directly managed users.


Specify the severity levels to filter the data.

Users to display

Specify the number of managed users to display.

Click Save to apply changes and update the widget data.