IBM Security QRadar

 View Only

  • 1.  Report Cleanup

    Posted Wed September 30, 2020 05:24 AM
    I am generating several types of reports.
    How do I specify how long they will be kept in QRadar, after which they will be automatically be removed?
    Is it possible to specify this per type of report?

    ------------------------------
    Joao Goncalves
    Pyxis, Lda.
    Sintra
    +351 91 721 4994
    ------------------------------


  • 2.  RE: Report Cleanup

    IBM Champion
    Posted Tue October 06, 2020 03:58 PM
    Hello Joao,

    Default retention for reports is 30 days. This can be changed in Admin/System settings.
    I am not aware of a way to specify retention per report. I only know the "global setting".

    Hope that helps.

    Regards.
    Arnaud.

    ------------------------------
    Arnaud Chemla
    Head of security consulting
    Abakus Securité
    ------------------------------

    Original Message