Severity of Incident is High, but policy is not
search cancel

Severity of Incident is High, but policy is not


Article ID: 160743


Updated On:


Data Loss Prevention Enforce Data Loss Prevention


The incidents for my policy have a Severity of High.  The policy was set to create a Medium severity for the given number of matches.  Why are the severities set incorrectly?


Any supported release


The severity of the policy may be lost.  If the policy is saved, and there is no associated severity, the system assumes the severity is high. This issue is rare.

If the severity is lost, the best way to work around is to save the policy with the correct severity. The issue should not recur.


Additional Information

Some other articles with similar issue:

Severity of an incident set by number of matches by policy not by rule (

Group Rule applied in a DLP policy is not setting the severity as expected (

Severity not set correctly for Cloud Email Service incidents (

Incidents no longer generate after Endpoint Servers are upgraded to DLP 15.8 (