Managing Inactive Agents

An administrator can configure the inactive agent retention policy to delete data of agents that are inactive, from the Endpoint Server. On deletion, the Endpoint Server stops collecting data from these agents. By default, this option is enabled.

To configure the inactive agent retention policy:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.

  2. In the Services view, select Endpoint Server.

  3. Click netwitness_actions_icon.png and select > View > Config.

  4. Click the Data Retention Scheduler tab.

    data_retention_scheduler_tab.PNG

  5. In the Inactive Agents Retention Policy panel, by default, the Threshold is set to 90 days and Run to Everyday. This means that the data of agents that have not communicated with the Endpoint server for 90 days is deleted from the database.
  6. Click Apply.

Note: The Inactive Agents Retention Policy is not applicable for NetWitness Endpoint 4.4.0.2 or later agents.