Use this screen to save an incident list report as an archive of HTML pages. An archive allows personnel without direct access to Symantec Data Loss Prevention to study incident data, drilling down into individual incidents as needed.
When you export incidents as a Web Archive, the archive is placed in directory \SymantecDLP\Protect\archive\webarchive.
Note: You cannot archive summary reports or dashboards.
When exporting incidents, please note the following considerations:
An archive cannot be summarized like a normal report.
An archive contains no filters, so it may be difficult to locate a specific incident in an archive containing a large number of incidents.
Exporting an archive of incidents does not remove the incidents from the administration console.
You can export only one archive at a time.
Export Web Archive is a user privilege that must be assigned to a role. You can export web archives only if your role provides access to this feature. Since role access also determines what information is contained in incident reports, it also applies to archiving those incident reports. The information that is contained in the archive you create is the same information contained in the original incident report.
The Export web archive screen is divided into two sections:
A] Export web archive - Create Archive.
B] Export web archive - All Recent Events.
A] Export web archive - Create Archive :
In the Create Archive section, complete the following information:
Field : Description
Archive Name : Specify a name for the archive you are creating using normal Windows naming conventions.
Report to Export : From the drop-down list, select the report that you want to archive. Any reports you created are available along with default report options.
The Network options are as follows:
Incidents - Week, Current - Network incidents from the current week.
Incidents - All - All network incidents.
Incidents - New - Network incidents with status of New.
The Endpoint options are as follows:
Incidents - Week, Current - Endpoint incidents from the current week.
Incidents - All - All endpoints incidents.
Incidents - New - Only endpoint incidents with status of New.
The Discover options are as follows:
Incidents - Last Scan - Discover incidents from the last completed scan. (Incidents from a currently active scan are not included.)
Incidents - Scan in Process - Discover incidents from the current scan.
Incidents - All Scans - All Discover incidents.
Incidents - New - Discover incidents with status of New.
The Mobile options are as follows:
Incidents - Week, Current - Network incidents from the current week.
Incidents - All - All network incidents.
Incidents - New - Network incidents with status of New.
After you complete the fields, click Create to compile the archive.
B] Export web archive - All Recent Events :
The All Recent Events section displays a list of events related to this archive. (The list appears only after you click Create to create the archive.) Event entries show the following information:
The event type (Error, Warning, or System Information).
The event date and time
A brief description of the event
To see the details of any event, click on the event entry in the list. To see the full Events Report for this archive, click show all.