Types of incident summary reports and what you can do with them

Prev Next

There are four incident summary reports available from MenuQueries & ReportsTrellix GroupsData Loss Prevention:.

  • DLP: Number of incidents per day (data in-use/in-motion)

  • DLP: Number of incidents per rule set (data in-use/in-motion)

  • DLP: Number of incidents per severity (data in-use/in-motion)

  • DLP: Number of incidents per type (data in-use/in-motion)

From here, you can run a report immediately to see a summary of the incidents or schedule a report to happen in the future. Scheduled reports can be exported to a file and sent to an email address.

Note

The Duplicate option is currently not supported.

When you run any of the reports, the summary page shows the number of incidents in graph and table format. These reports only show incident data for the past 30 days. From the report summary, you can choose to either export the chart data in many formats or export drill-down chart data.

Selecting an element of the graph or one of the table rows drills down into Protection Workspace and displays the selected incidents. The incidents you see in Protection Workspace are filtered according to what you selected in the report summary.