You are not seeing informational events recorded in the DLP Enforce Server

Products

• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention

Issue/Introduction

You are wondering if it is possible for all events to be reflected in the DLP Enforce Server (web console)?

Environment

Release : 15.8

Component : Data Loss Prevention Enforce with the Cloud Detection Service for CASB

Cause

You are seeing lots of events in the CloudSOC but not as many of them in DLP.

Resolution

The only types of events usually sent over for DLP inspection are those which are flagged as "Critical" events in the CloudSOC.

Events such as those marked "Informational" do not trigger DLP inspection, and will not be recorded as incidents in DLP.