Kishorilal,

There is a lot of ways to customize the reports that are created by the DLP product. If the reports that can be created in the Enforce I are not sufficient or contain too much information there are ways to create your own cutomized reports.

This can be done using the Reporting API. Since the information within the Enforce DB is encrypted for protetion there is a customizable reporting API that can be used to create your own reports and then use a Reporting Tool to create the reports that same way you would as if you were mining data on a typical DB.

There is detailed documentation on this in the "Symantec DLP 11.X Reporting API deverlopers Guide."

Funny you mention this, I have just been looking into the IT analytics program and will be exploring this further.

This was just released for DLP and may provide more insight into reporting.

IT Analytics on the SMP is the way to go.  I've dug into this more recently and it looks to be the best solution right now for custom reporting.

I had a request today for 5-6 reports that i think the IT analytics would answer. they want to know the numberr of incidents closed by investigator, number of incidents per end user or machine and so forth.