Incident Management: Retention Scheduler Tab

Document created by RSA Information Design and Development on Jun 26, 2017•Last modified by RSA Information Design and Development on Feb 7, 2018
Version 3Show Document
  • Comment • 0
  • View in full screen mode
  

The settings in the Retention Scheduler tab allow you to specify a retention period for alerts and incidents. 

To access the Retention Scheduler tab:

  1. In the Security Analytics menu, select Incidents > Configure.

    The Configure panel opens to the Aggregation Rules tab by default.

  2. Select the Retention Scheduler tab.

    tab_RetSched.png

The Retention Scheduler tab has these features:

                       
FeatureDescription
Number of days Specifies how long to keep alerts and incidents before they get deleted.
Enable  Deletes alerts and incidents when the retention period ends.
Apply Puts the settings into effect immediately.
Previous Topic:Notifications Tab
You are here
Table of Contents > Incident Management Reference Information > Configure View > Retention Scheduler Tab

Attachments

    Outcomes