Incident Management: Retention Scheduler Tab

Document created by RSA Information Design and Development on Jul 27, 2016Last modified by RSA Information Design and Development on Jul 27, 2016
Version 2Show Document
  • View in full screen mode
 

The settings in the Retention Scheduler tab allow you to specify a retention period for alerts and incidents. 

To access the Retention Scheduler tab:

  1. In the Security Analytics menu, select Incidents > Configure.
    The Configure panel opens to the Aggregation Rules tab by default.
  2. Select the Retention Scheduler tab.
    tab_RetentionScheduler.png

The Retention Scheduler tab has these features:

                       
FeatureDescription
Number of days Specifies how long to keep alerts and incidents before they get deleted.
Enable  Deletes alerts and incidents when the retention period ends.
Apply Puts the settings into effect immediately.
You are here: Incident Management Reference Information > Configure View > Retention Scheduler Tab

Attachments

    Outcomes