Is there a way to adjust the DLP Auditing - User Action Auditing report in IT Analytics (ITA) so that it can show the name of the directory group that was modified?
Release : 2.9.1
Component : Reports
All ITA reports can be modified via Microsoft Report Builder; however, the AuditLog table in the Symantec Data Loss Prevention (DLP) database contains DirectoryGroupID values that are not present in the DirectoryGroup table (e.g., '0'), preventing the two tables from being joined in a query to return additional details like the name of the modified directory group. This is a limitation of the DLP database schema that can't be circumvented through any changes to IT Analytics.