Uploaded a file that had words “social_security_number” and action did not generate incidents

Incident won’t be generated for any file uploads

A typical environment consists of

• Enterprise DLP 
• Prisma Access or NGFW 
• DLP plugins on Prisma Access or NGFW

The predefined pattern National Id - US Social Security Number - SSN within the profile does come with a set of many keywords. If the DLP rule has proximity set to High with a probability more than 1 and the file (to be or) that was uploaded doesn't not have predefined keywords, incident won’t be generated. The detections will show in low proximity. 

Predefined data pattern only comes with certain amount of static keywords. Different customers have different use-cases where they look for various keywords. One way to get around this is via alternate methods

• Clone or copy predefined pattern and add more keywords
• Create a new custom pattern with regex and add more keywords