Data Loss Prevention

Hi. How can create incident report with information from network and endpoint data mixed? Can't find such option. DLP 14. Thanks 

hello

 you could use "Users" menu in Incident tab. This will give you a view of incident per user whatever detection channel and you will able to apply different kind of filters on this report.

In order to works you have to define a user data source (should be available in System" tab) with different attribute (cf admin guide page 1049 about it). Some are mandatory in order to link incident together.

 regards.

Hello,

As far as I know it's not possible to put together incidents from different channels in same Incident Report based on native/generic filters. Using the dashboard feature you can show up different reports from different channels, but obviously is not the same.

Cheers,

Hi,

Can anyone please confirm if the combined report can be fetched using the 15.8 version or its still not supported ? and reports to be viewed separately.