Data Retention Scheduler Tab

In the Data Retention Scheduler tab, you can configure data retention, inactive agents, and downloaded data retention policies for multiple endpoint servers. To access this view:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.
  2. In the Services view, select Endpoint Server.
  3. Click netwitness_actions_icon.png and select > View > Config.
  4. Click the Data Retention Scheduler tab.

Repeat the above steps to configure data retention settings for multiple endpoint servers.

 

Workflow

netwitness_epdtretconfig_11.3.png

What do you want to do?

Role I want to ... Show me how

Administrator

Configure Data Retention Policy* Configuring Data Retention Policy

Administrator

Configure Inactive Agents Policy* Managing Inactive Agents

Administrator

Configure Downloaded Data Retention Policy* Configure Retention Policy for Downloaded Files

*You can perform this task in the current view

Quick Look

The following figure is an example of the Data Retention Scheduler tab.

data_retention_scheduler_tab.PNG

Features

The following table lists the fields for Data Retention Policy.

Field Description

Enable

Enables the configuration for the Data Retention Policy. By default, this option is enabled.

Threshold

Displays the number of days the Endpoint data is retained in the database. By default, the Threshold is set to 30 days. The data older than 30 days is deleted from the database.

Run

Displays the schedule for running the data retention job. By default, the database check occurs everyday at 00:00:00 AM. You can select the frequency from the drop-down list (Everyday, Weekdays, Weekends, or Custom, where Custom allows you to select one or more specific days of the week) and time to run the job.

Apply

Overwrites any previous schedule for the data retention policy and applies the new schedule immediately.

Reset

Resets the schedule to the default settings.

The following table lists the fields for Inactive Agents Retention Policy.

Fields Description

Enable

Enables the configuration for the Inactive Agents Retention Policy. By default, this option is enabled.

Threshold

Displays the number of days the inactive agents are retained in the Endpoint Server. By default, the threshold value is 90 days.

Run

Displays the schedule for running the inactive agents retention job. By default, the database check occurs everyday at 00:00:00 AM. You can select the frequency from the drop-down list (Everyday, Weekdays, Weekends, or Custom, where Custom allows you to select one or more specific days of the week) and time to run the job.

Apply

Overwrites any previous schedule for the inactive agents retention policy and applies the new settings immediately.

Reset

Resets the schedule to the default settings.

The following table lists the fields for Downloaded Data Retention Policy.

Fields Description

Enable

Enables the configuration for the Downloaded Data Retention Policy. By default, this option is enabled.

Note: The downloaded data can be Files, Process Dump, System Dump, and MFT.

Threshold

Displays the number of days the downloaded data is retained in the Endpoint Server. By default, the Threshold is set to 90 days. The data older than 90 days is deleted from the Endpoint Server.

Run

Displays the schedule for running the retention job. By default, the database check occurs everyday at 00:00:00 AM. You can select the frequency from the drop-down list (Everyday, Weekdays, Weekends, or Custom, where Custom allows you to select one or more specific days of the week) and time to run the job.

Apply

Overwrites any previous schedule for the retention policy and applies the new schedule immediately.

Reset

Resets the schedule to the default settings.