"Incident data discarded based on response rule" appears unexpectedly in incident history

book

Article ID: 159945

calendar_today

Updated On:

Products

Data Loss Prevention Enforce

Issue/Introduction

When using Symantec DLP version 9 or later, the message "Incident data discarded based on response rule" appears in the history for Network incidents, even though no response rules are configured to discard incident data.

Resolution

This is a known cosmetic issue related to how both Data At Rest (DAR) and Data In Motion (DIM) incidents are handled and can be ignored per Etrack 1501510.