Incident Management: Retention Scheduler Tab

Document created by RSA Information Design and Development Employee on Oct 24, 2017Last modified by RSA Information Design and Development Employee on Jan 29, 2018
Version 2Show Document
  • View in full screen mode

The settings in the Retention Scheduler tab allow you to specify a retention period for alerts and incidents. 

To access the Retention Scheduler tab:

  1. In the Security Analytics menu, select Incidents > Configure.

    The Configure panel opens to the Aggregation Rules tab by default.

  2. Select the Retention Scheduler tab.


The Retention Scheduler tab has these features:

Number of days Specifies how long to keep alerts and incidents before they get deleted.
Enable  Deletes alerts and incidents when the retention period ends.
Apply Puts the settings into effect immediately.
Previous Topic:Notifications Tab
You are here
Table of Contents > Incident Management Reference Information > Configure View > Retention Scheduler Tab