Viewing the incident list

To view a list of data loss prevention incidents from the last 3 or 7 days, and their details:

In the Forcepoint Security Manager, go to the Data > Main > Reporting > Data Loss Prevention page.
From Recent Reports, select Incidents (last 3 days) or Incidents (last 7 days).

To view a list of mobile device incidents from the last 3, 7, or 30 days, and their details:

Select Main > Reporting > Mobile Devices.
From Recent Reports, select Mobile Incidents (last 3 days) or Mobile Incidents (last 7 days) or Mobile Incidents (last 30 days).

To view a list of discovery incidents and their details:

Select Main > Reporting > Discovery.
From Recent Reports, select Incidents.

The top portion of the resulting screens lists incidents, their status, the action taken, and many more details.

The incidents list is a table displaying all data loss prevention, mobile device, or discovery incidents. By default, incidents are sorted by their incident time, but you can sort them (ascending or descending) by any of the columns in the table. For each incident, a quick preview of the data is provided. You can customize the types of details shown. (See Editing table properties.)

Click the down arrow on column header to sort, filter, or group incidents by that column. (See Applying a column filter, for more information.) Or click Table Properties to change the columns that are displayed, their order, and their width. See Table Properties tab, for a description of each property.

Use the table controls to jump to the first, last, previous, or next incident in the list. Select an incident to view details about it in the bottom portion of the screen. (See

Previewing incidents, for more information about what is displayed.)

Use toolbar buttons to manage incident workflow, remediate incidents, escalate incidents, change incident filters or table properties, and more.