"Incident data discarded based on response rule" appears unexpectedly in incident history
Updated On:04-12-2014 12:50
Data Loss Prevention Enforce
When using Symantec DLP version 9 or later, the message "Incident data discarded based on response rule" appears in the history for Network incidents, even though no response rules are configured to discard incident data.
This is a known cosmetic issue related to how both Data At Rest (DAR) and Data In Motion (DIM) incidents are handled and can be ignored per Etrack 1501510.