Data Retention Tab - Archiver

From the netwitness_adminicon_25x22.png (Admin) > Services > Config view > Data Retention tab of an Archiver, administrators can define the criteria for log retention and storage.

Workflow

This workflow illustrates the end-to-end installation and configuration process for an Archiver. From the Data Retention Tab you can configure hot, warm, and cold storage along with configuring multiple storage collections for data retention.

netwitness_arcdatarettbwf.png

What do you want to do?

Role I want to... Show me how...

Administrator

Add the Archiver service.

Edit the Archiver Service

Administrator

Add Log Decoder as a Data Source to an Archiver.

Add Log Decoder as a Data Source to Archiver

Administrator

*Configure Archiver Storage and Log Retention.

Configure Archiver Storage and Log Retention

Administrator

Add an Archiver as a Data Source to Reporting Engine.

Add Archiver as a Data Source to Reporting Engine

Administrator

Configure Archiver Monitoring.

Configure Archiver Monitoring

*You can perform these tasks here.

Related Topics

Configuring an Archiver

Configure Hot, Warm, and Cold Storage

Quick Look

As an administrator, you can configure hot, warm, and cold storage as well as multiple storage collections with different locations and criteria for retaining logs. For example, you can create a Compliance collection that stores logs for a specific time period as required by government regulations. You can create another collection that stores low value logs in hot storage with a much shorter retention period. The flexibility of these collections enables you to have significantly less overall storage requirements.

netwitness_121_dataretentation_1122.png

1 Displays the Collections panel with the Data Retention tab open.
2 Allows you to sort the collections in ascending or descending order.
3 Displays the allocated hot storage space for the collection, as well as the approximate current usage.
4 Displays the allocated warm storage space for the collection, as well as the approximate current usage.
5 Displays whether the collection uses cold storage for long-term backup.
6 Displays the time range used to determine when data is moved to cold storage or discarded.
7 Displays the amount of data written to the collection during the past hour.
8 Displays the date of the oldest data stored in the collection.
9 Displays the approximate age of the oldest data stored in the collection.
10 Displays the compression type used in collection storage.
11 Displays whether or not hashes are used when storing data in the collection.
12 Displays the number of retention rules that use this collection for storing data.
13 Displays the Actions drop-down menu.
14 Displays the Retention Rules panel.
15 Displays the order in which Retention Rules are evaluated in the execution chain.
16 Displays the name of the Retention Rule.
17 Data that satisfies this condition is stored in the corresponding collection.
18 Displays the collection used to store the data that satisfies this particular rule condition.

Total Hot, Warm, and Cold Storage

The Total Hot Storage section shows the total amount of Hot storage available and the number of hot storage mount points. The Total Hot Storage section shows the total amount of Warm storage available and the number of warm storage mount points. The Total Cold Storage section shows the total amount of Cold storage and the remaining free space available in Cold storage.

netwitness_totalstore.png

Hot, Warm, and Cold Storage Mount Points Dialogs

In the Hot, Warm, and Cold Storage Mount Points dialogs, you can specify the mount points for your storage locations. You can specify portions of this storage to use for your log storage collections.

To access the Hot, Warm, and Cold Storage Mount Points dialogs, click the netwitness_ic-actns2_21x21.png icon near the respective section.

netwitness_archotstormp.png