Incident trends

Administrator Help | Forcepoint DLP | Version 8.5.x

After Forcepoint DLP has been running for a while, it may be useful to see what the number of incidents was when the system was installed and if it declined over time. You can also monitor trends for specific policies over time.

Go to the Main > Reporting > Data Loss Prevention page.

From the report catalog, expand the Trends folder and select Incident Trends (this quarter).

Click Run to generate the report.

The trend report displays trends for new incidents and top policies over a defined period of time, such as a quarter or year.

New Incidents displays the number of new incidents that transpired during the period, month by month.

Top Policies lists the policies that triggered the greatest number of incidents over the time period being displayed. The graph below charts the trend of the number of incidents received over time per policy. Click Show All to view a list of all the policies.

To change the time period, click Manage Report > Edit Filter. To specify how many policies to include in the report's Top Policies chart, select Manage Report > Show Top Items. For example, do you want to see the top 5 violated policies? The top 10?


	Note The trend report is based on aggregated data. The aggregation is done every five minutes, so incidents added in the last five minutes may not yet appear in the list.