When there are multiple block verdicts by DLP in the same session ID, File Blocking log is recorded only for the first block verdict.

• Upload multiple files simultaneously.
• Files are blocked by DLP rule.
• The files are uploaded with the same session ID.
• Only the first blocked file is logged in the File Blocking Log(Data Filtering log in Panorama).
• DLP Incident shows that all files are blocked.

• Enterprise DLP
• File Blocking/Data Filtering

It is an expected behavior based on the code implementation.
When there are multiple block verdicts in the same session by DLP, File Blocking log is recorded only for the first block verdict.

If you would like to check all the files blocked by DLP, you can see it under the DLP Incident page in Strata Cloud Manager.