You suspect a policy of false negatives (missing messages that should have been detected), and you wish to examine a piece of content to confirm that it is being detected correctly.
False negatives occur when messages are sent that should have created an event, but do not create an event. As a first step in troubleshooting a false negative, find the cracked text of the input document.
To find the cracked text of the input document:
From a command prompt, change directory to the Vontu product tree:
Find the program called “filter.”
Note: If you get the following error, try adding the file extention for the file to the input file name.
Description: Could not filter file because the input file could not be found.
Error code: 24.
Example: C:\Program Files\Symantec\DataLossPrevention\KeyView\12.2\Protect\plugins\contentextraction\Verity\x64>filter C:\Users\Administrator\Desktop\testfile.pdf output.txt