Unable to generate an incident with a custom Data Identifier using Data Loss Prevention (DLP) Endpoint Prevent.

• 15.1 and higher

You now have the option to add Pre and Post validators to a custom Data Identifier after adding a Data Normalizer.

• Beginning in DLP 15.1 you now have the ability to further customize your Data Identifiers with Pre and Post validators subsequent to normalizing the data.
• The validators pre-populated are default and were present in 15.0 and under.

For tips and best practices to create custom data identifiers refer to the Detection Customization Guide for your version of DLP.

Symantec_DLP_15.8_Detection_Customization_Guide.pdf