Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

Allow searching through incidents for any text

Created: 13 May 2014 | 3 comments
RonCaplinger's picture
7 Agree
0 Disagree
+7 7 Votes
Login to vote

We have a need to search past incidents for specific text in any field (body, sender, attachments if still contained in the DB, etc.) to identify details of certain patterns.  For instance, if we come across a suspicious credit card number, we want to see if it was ever found in any other DLP incidents. 

Or if someone emails a document whose name includes a version number in the attachment name, we want to be able to identify all versions of that doc.  Currently, we are limited to the correlations but that is only usefulif the document name is the same every time, or we could search through every incident from a specific sender, but that gets to be too big of a job when the sender has thousands of incidents.

Comments 3 CommentsJump to latest comment

jasonhopp's picture

I second this request.  It would be a fantastic feature to add to DLP.  Currently we are in the same boat as we are in need to do some searches for keywords and terms from all incidents and have no way of doing this currently.  This would be a great benefit and add so much more to the reporting aspect.  Thanks and hopefully look forward to seeing this feature get added.

Login to vote
Goltrek's picture

Yeah, this is a very important feature to be included in the next version of DLP.

Login to vote
ADILT's picture

Very much so agree, that this is a requirement a lot of customers need, and want.

Login to vote