Veritas Data Insight User's Guide
- Section I. Introduction
- Section II. Data Insight Workspace
- Navigating the Workspace tab
- Analyzing data using the Workspace views
- Viewing access information for files and folders
- About viewing file or folder summary
- Viewing the overview of a data source
- Managing data custodian for paths
- Viewing user activity on files or folders
- Viewing file and folder activity
- Viewing CIFS permissions on folders
- Viewing NFS permissions on folders
- Viewing SharePoint permissions for folders
- Viewing OneDrive permissions for folders
- Viewing Box permissions on folders
- Viewing audit logs for files and folders
- About visualizing collaboration on a share
- Viewing access information for users and user groups
- Viewing the overview of a user
- Viewing the overview of a group
- Managing custodian assignments for users
- Viewing folder activity by users
- Viewing CIFS permissions for users
- Viewing CIFS permissions for user groups
- Viewing NFS permissions for users and user groups
- Viewing SharePoint permissions for users and user groups
- Viewing Box permissions for users and user groups
- Viewing audit logs for users
- Section III. Data Insight reports
- Using Data Insight reports
- About Data Insight reports
- How Data Insight reporting works
- Creating a report
- About Data Insight security reports
- Activity Details report
- Permissions reports
- Inactive Users
- Path Permissions
- Permissions Search report
- About Permissions Query templates
- Creating a Permissions Query Template
- Creating custom rules
- Permissions Query Template actions
- Using Permissions Search report output to remediate permissions
- Entitlement Review
- User/Group Permissions
- Group Change Impact Analysis
- Ownership Reports
- Create/Edit security report options
- About Data Insight storage reports
- Create/Edit storage report options
- About Data Insight custom reports
- Considerations for importing paths using a CSV file
- Managing reports
- About managing Data Insight reports
- Viewing reports
- Filtering a report
- Editing a report
- About sharing reports
- Copying a report
- Running a report
- Viewing the progress of a report
- Customizing a report output
- Configuring a report to generate a truncated output
- Sending a report by email
- Automatically archiving reports
- Canceling a report run
- Deleting a report
- Considerations for viewing reports
- Organizing reports using labels
- Using Data Insight reports
- Section IV. Remediation
- Configuring remediation workflows
- About remediation workflows
- Prerequisites for configuring remediation workflows
- Configuring Self-Service Portal settings
- About workflow templates
- Managing workflow templates
- Creating a workflow using a template
- Managing workflows
- Auditing workflow paths
- Monitoring the progress of a workflow
- Remediating workflow paths
- Using the Self-Service Portal
- About the Self-Service Portal
- Logging in to the Self-Service Portal
- Using the Self-Service Portal to review user entitlements
- Using the Self-Service Portal to manage Data Loss Prevention (DLP) incidents
- Using the Self-Service Portal to confirm ownership of resources
- Using the Self-Service Portal to classify sensitive data
- Managing data
- About managing data using Enterprise Vault and custom scripts
- Managing data from the Shares list view
- Managing inactive data from the Folder Activity tab
- Managing inactive data by using a report
- Archiving workflow paths using Enterprise Vault
- Using custom scripts to manage data
- Pushing classification tags while archiving files into Enterprise Vault
- About adding tags to devices, files, folders, and shares
- Managing permissions
- Configuring remediation workflows
- Appendix A. Command Line Reference
- Index
Monitoring the progress of a workflow
On the Workflows listing page, you can view the progress of workflows that are submitted to the Self-Service Portal. You can also view the details of the actions that are taken on all paths that are part of a workflow.
All workflow-specific jobs must run before you can see the response that the custodian submits from the Veritas Self-Service Portal on the Data Insight Console.
To view the status of a workflow
- On the console, click the Workflows tab and then the Workflows sub-tab.
On the Workflows list page, you can view the status for each workflow. The following table describes the possible status for any workflow:
Status
Description
Draft
When the workflow is saved as a draft but is not submitted to the portal server.
Submitted
When the workflow is submitted from the Management Server but is not picked up by the Portal server for processing.
In-progress
When workflow is being processed by the portal server for processing .
Completed
A workflow is marked as complete if:
The end date of the workflow lapses and after a day of grace period from the end date.
An action is taken on all the paths by all the custodians and the portal server has processed the workflow
Canceled
If you have canceled the workflow.
Grace Period
After the due date of the workflow, an extra day is given as grace period. In this case, the state of the workflow is set to Grace Period. If actions are still not taken by the end of the grace period, the status changes to Completed, and the state of the paths will be shown as Expired.
Failure
If Data Insight fails to create a workflow database based on the input that is provided for the workflow.
Error
If Data Insight fails to process the workflow.
- On the workflow listing page, select a corresponding and click Select Action > View, or click the workflow link to view details of a submitted, completed, or canceled workflow.
- On the workflow summary page, you can view the list of paths that are submitted for custodians' actions on the Self-Service Portal. The page also displays the summary of the total paths in the workflow, the percentage of paths on which an action is submitted on the portal, and the time within which the workflow must be completed.
Select a path to review the details of the workflow.
Depending on the type of the workflow, you can also view the following details:
In case of an Entitlement Review workflow, the users whose permissions were reviewed, the current permissions assigned to the user on that path, the activity status of the user, the direct groups from which permissions are inherited by the user, the custodian's recommendation - whether to allow access to the user or not, and whether the user is a creator owner on the path.
In case of a DLP Incident Remediation workflow, the Data Loss Prevention (DLP) policies that the paths violate, the severity of the incidents, and the incident IDs that need to be remediated. The incident ID is associated with the available response rules for a given incident.
In case of a Records Classification workflow, the policies that the files violate, the name of the action , the retention category being applied to the file, and the response from the Enterprise Vault™ server.
The custodian(s) for whose action the workflow is submitted.
The status for each path can be one of the following:
Status
Description
Pending
Indicates that the custodian has not taken any action on the assigned paths.
Executing Action
In case of a Records Classification workflow, this status indicates that a file is marked as record by the custodian, and the archive request is being processed by Enterprise Vault™.
Success
Indicates that the custodian has submitted an action and the action has been registered with the Data Insight Management Server.
In case of a DLP Incident Remediation workflow, it means that Data Insight has sent the response rule request for execution to the DLP Response Rule Execution Service.
In case of a Records Classification workflow, if a file is marked as record by the custodian, and if automatic action is configured, Data Insight submits the response for action to Enterprise Vault. Once Enterprise Vault archives the file and applies the post-processing actions on the file, Data Insight displays the response from Enterprise Vault on the Management Console. In this case, Success indicates that the archive request is completed by Enterprise Vault™.
Whereas, if a file is marked as No record, or if automatic action is not enabled, Success indicates that the custodian has submitted the response from the Portal. In this case, Data Insight simply logs the response submitted by the custodian on the Self-Service portal.
Failed
Indicates that the action submitted by the portal user on the Self-Service Portal is not registered with the Data Insight Management Server for any reason.
Expired
- Indicates that the due date for completing the workflow has expired, and the portal users will not be able to take any action on the paths in that particular workflow,
Depending on the type of workflow, you can also view the following information about the paths assigned for remediation:
Workflow
Details
Entitlement Review
Click the path to see the details of the user permissions on that path. For each user with permissions on the path, you can view the following information:
The user name
The login ID of the user
The type of permission the user has on the path. For example, read, write etc.
Activity status of the user, whether Active or Inactive.
Whether the user is allowed access on the path or not.
Whether the user is the creator/owner of the folder on the file system.
The creator owner on a path by default has Full permissions on the path.
DLP Incident Remediation
The actions are based on configured DLP Smart Response rules, for example, Quarantine, Mark for Deletion, or Archive.
For information about Smart Response rules, see the Symantec Data Loss Prevention Administration Guide.
A possible action can also be Delegate if the custodian delegates the incident remediation for certain paths to another user.
Ownership Confirmation
The possible actions for any path can be Confirm or Decline ownership.
Record Classification
The possible actions for any file can be Archive or Do not archive
For more information about Configuring SMTP server settings, refer to Data Insight Administrator's guide.