Reference Guide
Navigate the Dell Server
106
Column options for Protected Office only
Audit Event - Column options
Description
Data Guardian Action
If a service acts on a protected Office file, for example, modifying or deleting a file, the Data Guardian
Action column lists the reason. See
Protected_Office_Document_or_Basic_File_Protection_audit_events.
Column options related to Embargo:
From
To
From - The time that an external user can start viewing a protected file.
To - The time that an external user can no longer view a protected file.
See also Column_options_for_all_audit_events.
Protected Office Document or Basic File Protection audit events (Windows, Mac, mobile, web portal,
CASB)
This table lists audit events that apply to Office documents or other files entered in Basic File Protection:
• For Windows and Mac, audit events apply to Opt-in or Force Protected modes.
• Mobile has Opt-in mode only.
• Protected Office document audit events do not contain the Cloud Name or Cloud Action events
since protected Office documents can move to a cloud storage provider outside of the bounds
of Data Guardian. Those display for XEN audit events under Cloud_Encryption
.
• Basic File Protection events for Windows (excluding any .xen file extensions)
Actions
for
audit
events
Data Guardian
Action and
Description
Windows
Mac
Mob
ile
device
Web
portal
CASB
Created
New
Opt-in mode - logs an event when a
user selects Save As Protected and
an Office document is protected.
Force-Protected mode - logs events
when Data Guardian performs a
sweep and creates protected Office
documents.
●
●
●
●
●
Accessed
Open
A user opened a protected Office
document.
●
●
●
●
●
Modified
Swept
For Windows, when Force Protected
is enabled, provides data about files
that were swept and converted
from unprotected to protected
Office.
●
●
Modified
Updated
Summary of the number of times a
file was changed since the last audit
data transmission.
●
●
●
●
Modified
(Data Guardian
v2.7 and earlier)
Watermarked
User printed a file or exported a file
with a watermark.
●
●
Accessed
(Windows only
with D
ata Guardian
Block Copy
Indicates a file where a user tried to
copy from a protected Office
●