search cancel

Enforce Incident view summarized by policy & policy rules show incorrect match counts.

book

Article ID: 164113

calendar_today

Updated On:

Products

Data Loss Prevention Enforce

Issue/Introduction

Reports summarized by policy and policy rules will show incorrect match counts within the Incident Report.

The actual incident snapshot will have correct match counts pertaining to the number of rules violated per policy.

Cause

Row and Column counts are adversely affected by compound rules and report summarization.

  1. Each matched rule is summed correctly.
  2. Total violations are a sum of all rules violated.
  3. Total Matches is skewed due to compound rules being summed.

Resolution

Because the incident and match counts are correct, per incident, no further action is required.

Workaround for statistical reporting for DLP administrators. Remove the secondary summarization from the policy summary settings.


 

Attachments