EDM policy not detecting all columns

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

Detection is not happening properly i.e. 

- file is having 8 column and 7k+ line.

- policy is configured to match any 1 column.

- we tried to trigger policy by sending data of 1 column.

Environment

DLP 15.8, 16.0

Resolution

The Data Source information should be exactly as defined in the document i.e. the data to be free of duplicate and should be unique.

The encoding should match with the data source with that of the configuration on the EDM configuration i.e. UTF-8 , Windows 

Update the source data to be unique and follow the Best practices as per below document link.

Best practices for using EDM

1. Change the Encoding to go to UTF-8 as per the file encoding (validate and confirm)

2. The Match Data Row value is set to selected1of selected fields as in below screenshot

3. Change the policy Rule selected fields from 1 to 8 as you wanted to validate all 8 columns in this case as below.

Save the configuration and revalidate the behavior.