Video Screencast Help

DLP 11.6 insident snapshot text surrounded

Created: 06 Nov 2013 | 2 comments


How to increase the number of words around matched words in insident snapshot?

It's nessesary for incidents investigation without data retention ability (e.g. printer/fax incidents)


Operating Systems:

Comments 2 CommentsJump to latest comment

S_A_M's picture


At this point we do not have any such options, But try to increase the incident match count (Advance setting : DI.MaxViolations , by default it is "100" ) and see if that helps. It is not recommanded to increase it too high as that will slow down the detection process. 


Jsneed's picture

We have had to turn on incident data retention on our endpoint incidents for just this reason.