How do DLP incidents get converted into Netskope Alerts?

[Marvinr-crst]

Hii community,

I have noticed that in netskope platform, we are not able to see incidents but alerts so i had a question that "How do DLP incidents get converted into Netskope Alerts?".

Looking forward to answer.

Thanks

[rthomson · Accepted solution]

If a file is found to contain a DLP violation, you should see both a DLP 'Incident' and a SkopeIT Alert. 

A DLP Incident will show the file name object, but if you click inside that you should see multiple incidents triggered on the same filename:

For example, the DLP incident  for "Book1.xlsx" is only showing 14 DLP Incidents:

These DLP incidents also translate into multiple 'Alerts' in SkopeIT :