Configuring Data Retention Policy

An administrator can configure the retention policies to retain the Endpoint data based on the age or the storage size. By default, days and size-based retention policies are enabled.

To change the configuration for age-based retention:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.
  2. In the Services view, select the Endpoint Server service.
  3. Click netwitness_actions_icon.png and select > View > Config.

  4. Click the Data Retention Scheduler tab.

    data_retention_scheduler_tab.PNG

  5. In the Data Retention Policy panel, by default, the Threshold is set to 30 days, and Run to Everyday. This means only 30 days of Endpoint data is retained and the older data is deleted from the database.
  6. Click Apply.

To change the configuration for size-based retention:

By default, for the size-based retention, the rollover-after value is set to 80 and rollover-chunk-size is set to 10. This means that when the storage size exceeds 80 percent of the space allocated for the disk partition, 10 percent of the older Endpoint data is deleted from the database. However, you can change these values as follows:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.
  2. In the Services view, select the Endpoint Server service.

  3. Click netwitness_actions_icon.png and select > View > Explore. The Explore view is displayed:

    ServExpl.png

  4. In the left panel, select endpoint/config/data-retention.
  5. Edit the configurations based on your requirements.