View sensitive information for DLP alerts

task brazil Updated Sep 10, 2026 1 min read view-match-content.md
Raw file servicenow.com

View the detected sensitive information for DLP alerts.

Before you begin

There are certain rules and policies configured in the respective integration and if anytime you are violating the defined policies then a DLP incident gets created and the match content displays that violated information under the Sensitive Information section of that DLP incident record.

Role required: sn_dlir.analyst

Note: End users can also view the sensitive information by logging into DLP User Workspace.

Procedure

  1. Navigate to All > DLP Incident Management > DLP Analyst Workspace.

    The DLP Workspace - My Incidents page displays on the DLP Analyst Workspace for the analysts.

  2. Open any DLP incident.

  3. Navigate to Sensitive Information tab.

    [Omitted image "dlp-icap-match-content.png"] Alt text: DLP incident sensitive information

  4. Click on the violated record.

  5. View the match content information and take respective action as necessary.

    [Omitted image "dlp-icap-match-content-details.png"] Alt text: DLP incident sensitive information violated record.

Parent Topic:Internet Content Adaption Protocol (ICAP) integration for DLP IR

Search documentation
Search document titles and file paths on the brazil branch