Data Insight lookup returns no data within an incident snapshot

Article Id: 159813
Status: Published
Updated On: 21-10-2016 16:47
Legacy Id: TECH219700
Products:
Data Loss Prevention Network Discover , Data Insight for DLP
Issue/Introduction:

Data Owner is blank after performing a manual lookup within an incident snapshot.

 

Resolution:

DLP v11.1

  1. Navigate into the /Protect/config/ directory, and open Plugins.proterties in a text editor.
  2. Find the key: "com.vontu.api.incident.attributes.AttributeLookup.parameters=", and ensure it is set to a value of, "Sender, Incident, Message".
  3. Restart all Vontu services.

DLP 12.0+

  1. In Enforce, navigate to: System > Incident Data > Lookup Plugins
  2. Enable the following Lookup Parameters:
    • Incident
    • Message
    • Sender
  3. Save the changes.

After enabling the additional Lookup Parameters, perform a lookup on a Network Discover Incident to confirm the issue has been resolved.