This video shows how to configure a custom plugin in Symantec DLP v14.5 (but it did not change a lot since v 11.6).
You need to first create a new plugin (custom) then you will configure: - Plugin name : You could use what you want, it will be visible only in plugin configuration page. - Description - Main program to run your plugin (it could be python, perl, powershell,......) - Your plugin itself. It is better to store it in DLP directory (for example SymantecDLP/Protect/plugins) as it will be run by your tomcat server and if it is well configured, tomcat is not able to run executable stored in non DLP directory. - Parameters which allow you to activate some functionalities
Then save your plugin configuration. After that you must decide which parameters are necessary for your plugin (This configuration is the same for all plugins). Each category contains some different parameters which may not be available for all incident type. By default all your incident custom attribute will also be passed to your plugins. Then you must activate your plugin in "Modify plugin chain" menu.
From this moment your plugins will be executed each time a new incident will be generated or a manual plugin execution will be requested by a DLP user.