| Table of Contents | ||
|---|---|---|
|
| Info | ||
|---|---|---|
| ||
You can toggle between Autoremove and Remove page by clicking this toggle. |
Autoremove Data
Autoremove Data provides a mechanism to automatically manage the large amount of data that Snare Central is capable of collecting. Snare administrators can establish scheduled deletion tasks based on data age, log type, log name or agent.
Standards like PCI DSS have minimum time retention on logs, and the Autoremove Data capability allows automatic purging of Snare data after a defined period of time. This feature is flexible enough to support different log data aging criteria for different types of data or different sources of the data (agents).
| Info |
|---|
|
When configuring this functionality the administrator will be able to list, create, delete, modify and schedule 'autoremove' tasks. Snare Central support up to 100 auto-remove tasks.
...
The Remove Data page provides the ability to remove data by date, log type or agent.
| Info |
|---|
|
...
|
Use the three dropdown lists to select which logs you want to be removed. You can delete logs based on date, systems and logtypes.
Once you are satisfied with your selection, clicking the Remove the selected data button will start the process of removing the actual underlying files, and regenerating the metadata associated with those particular dates, log types and agents.
...