Configuring the retention policy for storing analysis results

You can set the number of days that you want to retain your offense analysis results. All analysis results are permanently deleted at the end of the retention period.

Before you begin

You must have QRadar® administrator privileges to configure a retention policy.

Procedure

  1. On the navigation menu ( Navigation menu icon ), click Admin.
  2. In the Apps section, under QRadar Advisor with Watson™, click Configuration.
  3. Click Optional Settings to open the Optional Settings menu page.
  4. Click Retention Policy.
  5. Enter the number of days that you want to retain your offense analysis results. The default value is 90 days.
    Note: If you want to disable automatic purging of analysis data, set the value to 0 (zero). All of your analysis results data is stored indefinitely.
  6. Enter the number of days that you want to retain your search results.
  7. Click Submit.