Masking in the role or data identifier does not mask the message body shown in the incident.

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Enforce

Issue/Introduction

You have configured masking for the user role.
That is masking the match highlighting section of the incident.
However, the message body in the incident's left panel is not masked.
Can the masking also apply to the message body in the incident.

Resolution

Masking is not applied to message bodies, it is applied to match highlighting.
This applies whether the masking is done in the user role on in the data identifier.

You can configure the option to disallow viewing the message body to prevent the incident reviewer from seeing the masked data.
To disallow viewing the message body, edit the role and clear the check mark for "Body" under the "Display Attributes" section of the "General" tab.