Asset retention values overview
Additional information for the period, in days, that you want to store the asset profile information.
- Assets are tested against the retention thresholds at regular intervals. By default, the cleanup interval is 12 hours
- All specified retention periods are relative to the last seen date of the information, regardless of whether the information was last seen by a scanner or passively observed by the system.
- Asset information is deleted as it expires, meaning that following a cleanup interval, all asset information within its retention threshold remains.
- By default, assets that are associated with un-remediated vulnerabilities (as detected by IBM QRadar Vulnerability Manager or other scanner) are retained.
- Assets can always be deleted manually through the user interface.
| Asset component | Default retention (in days) | Notes |
|---|---|---|
| IP Address | 120 days | By default, user-supplied IP Addresses are retained until they are deleted manually. |
| MAC Addresses (Interfaces) | 120 days | By default, user-supplied interfaces are retained until they are deleted manually. |
| DNS and NetBIOS Hostnames | 120 days | by default, user-supplied hostnames are retained until they are deleted manually. |
| Asset Properties | 120 days | By default, user-supplied IP Addresses are retained until they are deleted manually. The asset properties this value can affect are Given Name, Unified Name, Weight, Description, Business Owner, Business Contact, Technical Owner, Technical Contact, Location, Detection Confidence, Wireless AP, Wireless SSID, Switch ID, Switch Port ID, CVSS Confidentiality Requirement, CVSS Integrity Requirement, CVSS Availability Requirement, CVSS Collateral Damage Potential, Technical User, User Supplied OS, OS Override Type, OS Override Id, Extended, Legacy (Pre-7.2) Cvss Risk, VLAN, and Asset Type. |
| Asset Products | 120 days | By default, user-supplied products are retained until they are deleted manually. Asset products include Asset OS, Asset Installed Applications, and products that are associated with open asset ports |
| Asset "Open" Ports | 120 days | |
| Asset netBIOS Groups | 120 days | NetBIOS groups are seldom used, and more customers may not be aware of their existence. In the case where they are used, they are deleted after 120 days. |
| Asset Client Application | 120 days | Client Applications are not yet leveraged in the user interface. This value can be ignored. |
| Asset Users | 30 days |