Forum Discussion
Office 365 E5 Data Loss prevention reports Bugged?
I recently created a trial tenant based on the Enterprise E5 Office 365 package.
Microsofts Partner Portal to office 365 demo tenants are currently unavailable, so we had to go with the trial tenant.
My issue is this:
When a DLP policy in Outlook 365 is triggered, it WILL NOT report it. It will send a notification to the admin, but that the policy got triggered, but it will not be logged in the DLP report dashboard.
I cannot find information about this anywhere, only that it would appear to be a bug.
My second issue is that if I create a policy and then want to edit it, it will pop up with a windows saying the following: "Error, the value specified in sensitive information is invalid" and then displays the following error code:
"Request: /api/policy?policyType=Dlp
Statuscode: 500
Exception: Microsoft.Exchange.PswsClient.PswsException
Diagnostic information: {Version:16.00.1904.005,Environment:WEUPROD,DeploymentId:7bf1c951f4354dd78116b92e983c3a03,InstanceId:WebRole_IN_1,SID:23762266-3737-4f50-8bdc-130e6c08242f,CID:d8f96e61-7845-4cb8-940c-031e0a23df26} Tid:2017-08-23T08:43:40.9723825Z"
I'm currently creating a policy which will request a business justification when a mail is sent outside the organisation with information regarding Denmark Personal Identification Number - the same issue happens if I use a template.
What can this be?
Could it be that I need to toggle on some functionality which will make it start logging activities, or are these on by default?
As I'm aware the partner portal is down, and maybe some of the issues that has kept it down are present in the live trial tenant? This does seem bugged.
Did you find the recent DLP activities in audit logs?
Always it will take some time for the dashboards to catch up the activities. If you want to explore the DLP activities immediately then you need to do manual Audit log search.
In case you need to view it through a dashboard asap then you have to build your own using Management Activity API or use any 3rd party tool like AdminDroid.
I always prefer to search the activities in audit logs instead of reports/dashboards as most of the dashboard and reports are based on daily aggregation it will take considerable delay (for some reports it will take a day).
I use the dashboards/reports to see the weekly/monthly usage statistics alone.
