The DLP Events Dashboard provides administrators with a centralized view of all Data Loss Prevention activity across the organization. It allows you to monitor policy enforcement, identify trends, and investigate specific security events in real time.
Overview
As part of Swif’s commitment to data security, the DLP Events Dashboard offers visibility into how your organization's policies are protecting sensitive information. Whether an email was blocked in Gmail or a sensitive document was flagged in Outlook, all events are logged and visualized for easy analysis.
Key Features
1. Summary Metrics
At a glance, you can see high-level statistics for your organization’s DLP activity. This includes the total number of events, the number of blocked actions, and the most frequently triggered policies.
2. Event Trend Chart
The interactive trend chart visualizes DLP activity over time. This helps you identify spikes in policy violations or monitor the impact of new security rules as they are rolled out.
3. Detailed Events Table
The events table provides a comprehensive list of every DLP trigger. Each entry includes:
Application: The platform where the event occurred (e.g., Gmail, Outlook).
Action: The user action that triggered the event (e.g., Sending an email).
Decision: The outcome of the event (e.g., Blocked, Allowed, or Flagged).
Timestamp: Exactly when the event took place.
4. Event Details Drawer
Clicking on any event in the table opens a details drawer for deeper investigation. This view provides additional context, such as the specific policy triggered and the device involved.
Privacy & Security
To maintain the highest standards of privacy and security, Swif does not store or display the raw body text of emails or messages in the dashboard. The dashboard focuses on metadata and policy outcomes to ensure your organization remains compliant without exposing sensitive content to administrators.
How to Access
The DLP Events Dashboard is available to administrators within the Swif web console:
Log in to your Swif Dashboard.
Navigate to the Reporting or Security section in the sidebar.
Select DLP Events.
Note: If you do not see this option, ensure that the DLP Beta Flag is enabled for your organization.
Filtering & Analysis
You can narrow down the data to focus on specific areas of concern using the built-in filters:
Time Range: View events from the last 24 hours, 7 days, 30 days, or a custom range.
Application: Filter by specific web apps like Gmail or Outlook.
Decision: Focus only on "Blocked" events to prioritize high-risk activity.
Requirements
Swif Browser Extension: Must be installed and active on managed devices.
DLP Enabled: The Data Loss Prevention feature must be toggled ON in Team Settings.
Beta Access: During the initial rollout, this dashboard may require the "DLP Beta Flag" to be enabled by your Swif account manager.
For more information on configuring DLP policies, see our guide on Data Loss Prevention (DLP) for Web Email.