diff --git a/6.1.X/404.html b/6.1.X/404.html index 9f46eb20..b706c06e 100755 --- a/6.1.X/404.html +++ b/6.1.X/404.html @@ -2479,6 +2479,33 @@ +
Retention rules serve the purpose of establishing data retention times, specifying when data should be automatically deleted from the platform. Users can define filters to target specific objects. Any object meeting these criteria that haven't been updated within the designated time frame will be deleted.
Retention rules serve the purpose of establishing data retention times, specifying when data should be automatically deleted from the platform. Users can define filters to target specific objects. Any object meeting these criteria that haven't been updated within the designated time frame will be permanently deleted.
Note that the data deleted by an active retention policy will not appear in the trash and thus cannot be restored.
Retention rules can be configured in the "Settings > Customization > Retention policies" window. A set of parameters must be configured:
true
The indicator decay manager allows to update indicators score automatically based on configured decay rules.
More information can be found here.
The trash manager is responsible to delete permanently elements stored in the trash after a specified period of time (7 days by default).
The telemetry manager collects periodically statistical data about platform usage.
More information about data telemetry can be found here.
By default, a rollover policy is applied on all indices used by OpenCTI.
opencti_deleted_objects
opencti_files
opencti_history
opencti_inferred_entities
opencti_inferred_relationships
Create the following index templates:
octi_deleted_objects
octi_files
octi_history
octi_inferred_entities
octi_inferred_relationships
Repeat this step for all indices: