How to Purge Old McAfee DLP Events

The best way to purge McAfee DLP/HDLP events, For McAfee DLP and HDLP Version 9.3,9.4

On ePO console go to Menu-> Data Protection -> DLP Incident Manager

Go to Incident Tasks


Click Actions
dlp3Choose a Name and write a description if you want
Choose the Filter you want, I prefer always to choose the Occurred(UTC) – Is not within the Last X Days.
Click OK to save.

Make sure the state is Enable




Go to Menu -> Automation -> Server Tasks

Click on Actions -> New Task


Choose a Name and write a description if you want, Click Enable and then Next








Click on the drop down list next to the Actions, Choose DLP Incident tasks runner
Mark the task you created, click ok.



Make sure that the task is want you need(with the filter you configure)
Click Next

dlp9Configure the schedule to run the task.
If you configure to run the task in my example – Every day at 11:00 PM, The task will purge all the events older then 90 days.










See the task you created.
You can also run this task manually by click on the run button





Leave a Reply

Your email address will not be published. Required fields are marked *