Skip to main content
Solved

How do DLP incidents get converted into Netskope Alerts?

  • January 31, 2022
  • 1 reply
  • 152 views

Forum|alt.badge.img+2

Hii community,

 

I have noticed that in netskope platform, we are not able to see incidents but alerts so i had a question that "How do DLP incidents get converted into Netskope Alerts?".

 

Looking forward to answer.

Thanks

Best answer by rthomson

If a file is found to contain a DLP violation, you should see both a DLP 'Incident' and a SkopeIT Alert. 

 

A DLP Incident will show the file name object, but if you click inside that you should see multiple incidents triggered on the same filename:

 

For example, the DLP incident  for "Book1.xlsx" is only showing 14 DLP Incidents:

 

These DLP incidents also translate into multiple 'Alerts' in SkopeIT :

 

 

 

 

This topic has been closed for replies.

1 reply

rthomson
Netskope Employee
Forum|alt.badge.img+9
  • Netskope Employee
  • Answer
  • February 3, 2022

If a file is found to contain a DLP violation, you should see both a DLP 'Incident' and a SkopeIT Alert. 

 

A DLP Incident will show the file name object, but if you click inside that you should see multiple incidents triggered on the same filename:

 

For example, the DLP incident  for "Book1.xlsx" is only showing 14 DLP Incidents:

 

These DLP incidents also translate into multiple 'Alerts' in SkopeIT :