Incident trends
After Forcepoint DLP has been running for a while, it may be useful to see what the number of incidents was when the system was installed and if it declined over time. You can also monitor trends for specific policies over time.
- Go to the page.
- From the report catalog, expand the Trends folder and select Incident Trends (this quarter).
- Click Run to generate the report.
The trend report displays trends for new incidents and top policies over a defined period of time, such as a quarter or year.
- New Incidents displays the number of new incidents that transpired during the period, month by month.
- Top Policies lists the policies that triggered the greatest number of incidents over the time period being displayed. The graph below charts the trend of the number of incidents received over time per policy. Click Show All to view a list of all the policies.
To change the time period, click . To specify how many policies to include in the report’s Top Policies chart, select . For example, do you want to see the top 5 violated policies? The top 10?
Note: The trend report is based on aggregated data. The aggregation is done every five minutes, so incidents added in the last five minutes may not yet appear in the list.