Host GS: Services Config View - Data Retention Scheduler Tab

Document created by RSA Information Design and Development on Nov 7, 2017Last modified by RSA Information Design and Development on Jan 31, 2020
Version 16Show Document
  • View in full screen mode
 

The Data Retention Scheduler tab appears in the Services Config view for the Network Decoder, Log Decoder, and Concentrator.

In the Data Retention Scheduler tab, you can define the criteria for removing database records from primary storage on Network Decoder, Log Decoder, and Concentrator services, and schedule the timing for checking the threshold. 

Note: If additional customization is necessary, use the Scheduler under the Files tab in the Services Config view. For example, if you have storage available to save the RAW data versus the metadata, use Capacity as the threshold and to set different thresholds per database (metadata versus packet).

Workflow

This is an example of a workflow for the Services view.

What do you want to do?

                                           
User RoleI want to...Documentation
Administrator set up a host.

Setting Up a Host

Administratormaintain a host.Maintaining Hosts

Administrator

maintain a service.*

Maintaining Services

Administrator view or modify appliance service parameters.

See "Services Config View - Appliance Service Configuration Tab" in the Hosts and Services Getting Started Guide for Version 10.x and prior.

Administrator specify how long to retain database records.*

See "Configure Data Retention" in the Data Privacy Management Guide.

For information about the Data Retention tab for Archiver, see "Data Retention Tab - Archiver" in the Archiver Configuration Guide.

Administrator edit .xml and .lua files.

Edit Core Service Configuration Files

Related Topics

Quick Look

The following figure illustrates the parameters in the Data Retention Scheduler tab for a Concentrator.

Example of the Data Retention Scheduler tab for a Concentrator

The Data Retention Scheduler tab has sections to specify Threshold settings and Run settings. The following table lists the parameters supported for data retention configuration.

                           
ParameterDescription
ThresholdThe threshold is based on the age of the data, the amount of time the data was stored or the date on which the data was stored. The date is from the database file, not from the actual session time.
  • Duration: The duration of time that data can be stored before removal. Specifies the number of days (365 maximum), hours (24 maximum), and minutes (60 maximum) that have elapsed since the time stamp on the data.
  • Date: The removal of data based on the date of the timestamp. Specifies the monthly date and time in the The Calendar field icon and The Time field icon fields.
RunThe schedule for running the job that checks rollover criteria.
  • Interval: Schedule the database check to occur at a regular interval. Specifies the hours and minutes between the scheduled checks.
  • Date and Time: Schedule the database check to occur at a regular day and time. Specifies the day from the drop-down list and the system clock time in hh:mm:ss format. Possible values for day are Everyday, Weekdays, Weekends, and Custom, where Custom allows you to select one or more specific days of the week.
ApplyOverwrites any previous schedule for this service and applies the new settings immediately. 

Caution: After you apply these settings, when the threshold is met the system deletes the old data from the database and you can no longer access it.

ResetResets the schedule to the last applied state.

You are here
Table of Contents > References > Services View > Services Config View - Data Retention Scheduler Tab

Attachments

    Outcomes