Retention

You can setup how long SOAR data is saved and manage how often often data is cleaned up. You can only setup or change the number of days data is stored. You can’t control data retention according to weeks or hours, for example.

Default Settings

Go to Settings >> SOAR Settings from the navigation bar and click Retention.

  • PLAYBOOKS_HISTORY is for internal Logpoint use only.

  • CASES_RETENTION is how long SOAR cases are saved.

  • PLAYBOOKS_EXECUTION_RETENTION is how long to save playbook monitoring data.

  • SOAR_STATS_RETENTION is how long to save data statistics about SOAR playbooks.

  • EXECUTION_TRACKING_RETENTION is how long to save data about Execution Tracking.

  • LOGPOINT_WIDGETS_REPORTING is how long to save data forwarded from SOAR to SIEM used in the SOC Operation Dashboard.

In the list, to the right of each retention type is an ellipsis (…) click it to edit how long data should be stored.


Helpful?

We are glad this guide helped.


Please don't include any personal information in your comment

Contact Support