For each Realm, settings are defined.
For more information about setting up and editing Realms, see Setting up Agent Realms.
-
From Proofpoint Data Security & Posture, select the Administration app. Select Endpoints > Realms.
-
Open the General area, complete the fields described in the table below.
General Field Description Alias Name of the Realm (Mandatory)
Use only lowercase characters, dashes and underscores
Resource Group Select the region from the drop-down list. This links to the location to where all the data from agents in the Realm will be collected, processed and stored.
Realms can be set up in an EU1, JP1 (Japan), CA1 (Canada), AU1 (Australia), ME1 (Middle East) or US1 location depending on the region defined in the tenant entitlements. (See Understanding Entitlements.)
This set up is based on your subscription.
Feed Type The type of feed used to forward captured user activity.
- Agent: Data from direct attached agents
- Generic Feeder: Link to a generic feeder
Data Retention DLP Retention: Amount of time the Realm is retained for DLP.
ITM Retention: Amount of the Realm is retained for ITM.
Enrich User Information from Catalog Enrich user information. When enabled, all events are enriched with user information from the User Catalog. Select Endpoint Groups to Retain in Activities Choose the endpoint groups to be retained in activities so that they are available for Explorations.
This option is recommended when you set up an Agent Realm.
By default, all groups discovered by the agent on an endpoint are persisted in every activity. To reduce activity size, it is recommended that you select the endpoint groups you want retained in activities, ensuring they remain available for explorations. Any endpoint groups used in rules will be retained automatically, regardless of the group selection you make.
This is currently applicable to agent realms only and endpoint groups only.
Related Topics: