IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Report Cleanup

    Posted 09/30/20 05:24 AM
    I am generating several types of reports.
    How do I specify how long they will be kept in QRadar, after which they will be automatically be removed?
    Is it possible to specify this per type of report?

    ------------------------------
    Joao Goncalves
    Pyxis, Lda.
    Sintra
    +351 91 721 4994
    ------------------------------


  • 2.  RE: Report Cleanup

    Posted 10/06/20 03:58 PM
    Hello Joao,

    Default retention for reports is 30 days. This can be changed in Admin/System settings.
    I am not aware of a way to specify retention per report. I only know the "global setting".

    Hope that helps.

    Regards.
    Arnaud.

    ------------------------------
    Arnaud Chemla
    Head of security consulting
    Abakus Securité
    ------------------------------