Forcepoint DLP Data

App Installation

App	Search Head	Indexer	Heavy Forwarder	UF / Deployment Server	Additional Details
Forcepoint DLP	Required	-	Required	-	Steps to perform on forcepoint portal to forward the DLP logs via UDP/TCP

• Important sourcetypes to be collected
  • FP_DLP

Note : Create an index named forcepoint_dlp or update the macro definition in Cyences app configuration page (Cyences Settings > Cyences App Configuration).

Estimated Data Size

TODO