Create age chart configurations

Configure the age chart that appears in the Data Loss Prevention Incident Response (DLP IR) Ops portal. This chart shows the count of open incidents by the number of days.

Before you begin

Role required:

• sn_dlir.admin - Create, edit, and delete.
• sn_dlir.analyst and sn_dlir.analyst_read - View (read-only).

Procedure

1. Navigate to All > DLP Administration > Age Chart Configuration.

2. Review the age chart entries in the following table and customize the entries for your environment.

   Name	Condition
   0-30 days	Age of the open incident that is between 0 through 30 days.
   31-60 days	Age of the open incident that is between 31 through 60 days.
   61-90 days	Age of the open incident that is between 61 through 90 days.
   90+ days	Age of the open incident that is over 90 days.

3. Add a new age chart configuration by clicking New.

4. In the Name field, enter a Name for the DLP age chart configuration.

5. Set the conditions for the DLP age chart configuration.

   1. To add conditions, click AND or OR.

      • If AND is selected, all conditions must be matched.
      • If OR is selected, either condition can be matched. Note: The conditions in the condition builder are case sensitive.

   2. To set a second filter condition, click New Criteria.

6. Click Submit.

Parent Topic:DLP Incident Response Administration

Related topics

DLP default configuration settings

Create end user lookup rules

Create assignment rules

Create incident consolidation rules

Create response due date rules

Create Approval Rules

Create user instructions templates

Create email templates

Create a Data Loss Prevention Incident Response SLA trigger

Create a Data Loss Prevention Incident Response SLA definition

Create assessments

Configure response option for your DLP incidents

Create incident response option rules

Create user delegate configurations

Create repeat offender identification rules

Create additional incident data fields

DLP SLA Definition form

Configure advanced settings

Monitor DLP Integration Run process

DLP Incident Access Restrictions

DLP Incidents Archival