Video Screencast Help

Searching for Incidents related to a particular Match

Created: 06 Jan 2014 • Updated: 07 Jan 2014 | 3 comments
DLP Enthusiast's picture
This issue has been solved. See solution.

Dear All,

I have a scenario where I need to search for all Incidents related to a particular Credit Card number.

In general, Can we search for all incidents related to any specific matches in order to refine our incidents for reporting purposes..?

Operating Systems:

Comments 3 CommentsJump to latest comment

DLP Enthusiast's picture

Hi Pete,

This is surely helpful but may not be in my case. I need to search for all incidents with this specific Credit Card number from the Thousands of Incidents I have.

Need a search criteria which focusses on the incident match content ..

jjesse's picture

Good morning,

We have looked at this from several angles in the past and have not been able to crack the code for doing something like this.  THe Incident API does not expose this type of information so there is no way to write a web service or anything.  We've also tried exporting a bunch of incidents to CSV but once again the body of message or incident is not available.

My understanding the reason this is not exposed is the way the body of the incidents is encrypted so there is no way to get the information outside of looking at the incident.

Good luck would be interested if you found a way to do this, but I'm pretty sure based on th e way things are encrypted this is not possible.

Jonathan Jesse Practice Principal ITS Partners