Skip to main content

Hii community,

 

I have noticed that in netskope platform, we are not able to see incidents but alerts so i had a question that "How do DLP incidents get converted into Netskope Alerts?".

 

Looking forward to answer.

Thanks

If a file is found to contain a DLP violation, you should see both a DLP 'Incident' and a SkopeIT Alert. 

 

A DLP Incident will show the file name object, but if you click inside that you should see multiple incidents triggered on the same filename:

 

For example, the DLP incident  for "Book1.xlsx" is only showing 14 DLP Incidents:

 

These DLP incidents also translate into multiple 'Alerts' in SkopeIT :