DLP Incidents by Severity and Status Widget

This widget checks the number of DLP incidents based on severity levels and incident status. Data can be filtered by severity level, as well as display the total number of new and high severity incidents. By default the widget displays data from all the managed products that a user's account privileges allow.

Use the Range drop-down to select the time period for the data that displays.

Click the numbers in any column to open the Incident Information screen and review the summary of incidents.

To look up a specific incident, type an ID in the Incident ID field and click Search.


Each incident is assigned an ID number. ID numbers can be found by clicking a table link, in Incident details updated event notifications, or in Data Loss Prevention log query results.

Click the widget settings icon on the widget to access additional settings.




Specify a new and meaningful title for the widget in the field.


Specify the time range when the DLP incidents were triggered.


Specify the data scope displayed by the widget.

  • Directly managed users

  • All managed users: Data is collected from both directly managed users and people under the directly managed users


Specify the severity levels to filter the data.

Click Save to apply changes and update the widget data.