SOLVED

Find which DLP policy applied to a file

%3CLINGO-SUB%20id%3D%22lingo-sub-2240413%22%20slang%3D%22en-US%22%3EFind%20which%20DLP%20policy%20applied%20to%20a%20file%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2240413%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20multiple%20DLP%20policies%20defined%20in%20our%20tenant.%20I%20have%20files%20uploaded%20to%20SharePoint%20site.%20Is%20there%20any%20way%20I%20can%20tell%20which%20DLP%20policy%20finally%20applied%20to%20a%20file%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2240413%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

I have multiple DLP policies defined in our tenant. I have files uploaded to SharePoint site. Is there any way I can tell which DLP policy finally applied to a file? 

 

Thanks in advance  

1 Reply
best response confirmed by px091 (Contributor)
Solution

Office 365 audit log to find out. You'll be able to find activity related to email, groups, documents, permissions, directory services, and much more, should include DLP too. DLP execution order is the main influence what will happend, should check that too. Hope this helps.