If you find that your Transaction Security Policies are not showing up in SightLane, it may be due to a missing or unaligned piece of the configuration. There are several places where a simple item can stop Policy monitoring from functioning properly. If you don't see what you're expecting, try looking for the answer in these areas.
1. Missing or disabled Transaction Security Policy
Before SightLane can capture policy events, you must define and enable the policy through the Setup menu (Setup -> Transaction Security Policy). If you don't see this setup item, check your Shield licensing. Also, make sure that you have selected the correct Apex Condition class (sightlane_em__PolicyMonitor).
2. Missing or improperly configured SightLane Policy Event setting
Once you have defined the event, ensure there is a Policy Event Setting record (Custom Metadata Type) created for the Policy Event you have defined. Detailed instructions for configuring a SightLane Policy Setting can be found here.
3. Missing or improperly configured Evaluation Flow
Whatever Evaluation Flow is referenced by the policy setting must exist and be accessible. Check the API name of the Flow to be sure it exists and is activated in your org. Your evaluation Flow begins by deciding which type of event is being evaluated. In the image below, the decision component only selects Login events where the User Type is "Guest."
It is a best practice to filter items aggressively so that SightLane doesn't process events of low value. However, if you are missing events you think should be captured by SightLane, check your decision criteria. If you suspect events are not being selected when they should be, try temporarily adding some SightLane logging to the Unselected branch of the flow, as shown below. This will help you understand if there are events that are "slipping through the cracks!"
If these troubleshooting techniques do not solve your problem, please read the other articles in this section. If that doesn't work, write to us at support@sightlane.com, and we will help you get things set up correctly. You'll be capturing security events in no time!