Post Your Answer
7 months ago in Cybersecurity By Veena
How Long Does OSSIM Keep My Logs For?
I'm setting up OSSIM/AlienVault and planning our log storage. What's the default log retention period out of the box, and can we change it if we need to keep logs longer for compliance?
All Answers (1 Answers In All)
By Suma Answered 3 months ago
By default, OSSIM keeps logs in its active database for 30 days. After that, they're purged and you can't search for them through the normal interface anymore. The good news is this is totally configurable! You can adjust the retention policy to meet your specific needs, whether it's for longer forensic investigations or regulatory requirements. Just make sure your storage can handle it.
Reply to Suma
Related Questions