Creating DLP Auditing Logs

Administrators can use Ad Hoc Query to generate and export DLP auditing logs. Perform a log query as described in Working with Log Queries and configure the following:

• Data scope: Select Control Manager

• Data view: Select User Access Information

• Query criteria: Add the following activities to Custom criteria:

  • Delete DLP logs

  • Delete access logs

  • Download DLP incident file

  • Enable access log maintenance

  • Enable DLP log maintenance

  • Disable access log maintenance

  • Disable DLP log maintenance

  • Update DLP incident

  • Change DLP log maintenance setting

  • Update access log maintenance settings