Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

User Activity Monitoring

Created: 19 Jul 2010 | 2 comments

Hi
Is it possible to track the activities of the users accessing the DLP console? Like the incidents opened, escalated or dissmissed. I would also like to track the activities of the Administrator.

-Anamika

Comments 2 CommentsJump to latest comment

Naor Penso's picture

At the moment it is not possible to track every incident opened.
The concept is that you trust the people the you give access to the DLP console, You could also show certain incidents to certain types of people By managing Roles.
Still, I have raised a feature request regarding the issue you are speaking of.
You could vote on the feature and who knows, it might be implemented in the future.
https://www-secure.symantec.com/connect/idea/mask-...

Kind Regards,
Naor Penso

For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.
Thanks :)

Sidecar's picture

A partial solution may be that whenever a user actually makes a change to an incident, such as modifying status, severity, or attributes, a notation is made in that event's history. Filtering your report view by "Incident History Issuer" for the user in question, and perhaps by "Incident History Detail", can give you some of this...