DLP Incidents by Severity and Status Widget

This widget checks the number of DLP incidents based on severity levels and incident status. Data can be filtered by severity level, as well as display the total number of new and high severity incidents. By default the widget displays data from all the managed products that a user's account privileges allow.

Important:

This widget only displays data for Apex Central user accounts that have been assigned Data Loss Prevention (DLP) user roles.

For more information about reviewing DLP incidents and configuring DLP user roles, see https://docs.trendmicro.com/en-us/enterprise/apex-central-saas/dlp_incidents.

Use the Range drop-down to select the time period for the data that displays.

Click the numbers in any column to open the Incident Information screen and review the summary of incidents.

To look up a specific incident, type an ID in the Incident ID field and click Search.

Tip:

Each incident is assigned an ID number. ID numbers can be found by clicking a table link, in Incident details updated event notifications, or in Data Loss Prevention log query results.

Click the widget settings icon on the widget to access additional settings.

Setting

Description

Title

Specify a new and meaningful title for the widget in the field.

Range

Specify the time range when the DLP incidents were triggered.

Scope

Specify the data scope displayed by the widget.

  • Directly managed users

  • All managed users: Data is collected from both directly managed users and people under the directly managed users

Severity

Specify the severity levels to filter the data.

Click Save to apply changes and update the widget data.