Asset Panel Policy Violation Search Limitation

Printer Friendly Page

Asset Panel Policy Violation Search Limitation

 

The Assets panel (Explore --> Assets) provides filtering options to perform the basic search and query language to do an advanced search to narrow down the result and find the important incidents. 

 

Note that the current design for the Policy Rule filtering option only works if you set the policy to generate an incident or to send an alert to the administrator when creating the policy rule. The data is not stored if the policy rule does not create an incident or sends an alert to the administrator

 

This limitation only applies to the "Policy Rule" filter. The alternative to achieve the same result is to apply "Data Pattern" and "Data Profile" filtering options. This best works for the policies that the match criteria is only based on Data patterns and Data profiles.  

 

Please consider setting the checkbox to create an incident or to send an alert when modifying an existing policy or creating a new policy from scratch to have full visibility and search capability for policy violations.