View and Filter Data Pattern Match Results

Learn how to filter the match results for data patterns and create an incident threshold on Prisma SaaS.
When you Configure Data Patterns, you define the criteria that the policy rule uses when scanning for matches. Prisma SaaS compares all the information it discovers against the enabled data pattern and identifies match occurrences. From the match results, you can focus on a match to filter and determine if the number of occurrences meet an incident threshold.
  1. Filter data pattern match results with occurrence match counting.
    WildFire and machine learning data patterns do not have occurrences to specify in Match Criteria.
    1. Select
      Explore
      Assets
      Content
      to configure occurrence match counting to view pattern match results and adjust the threshold.
    2. Select the content
      Category
      to view.
    3. Enter the numerical value in
      Occurrences
      in the selected category, and click
      Enter
      to view the filtered results.
    For basic data patterns, you can Assess Incidents and remediate the occurrences. For weighted data patterns, you can calculate the unique occurrence against the weight threshold to determine a score. See Calculate a weighted regular expression
    faceted-search-content.png

Related Documentation