Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 3622 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SEC 5.51 automatic Alert deletion?

Dennis Haschke

Hello,
i use SEC 5.5.1....
Is it possible to automate a deletion of alerts?
E.g. delete all aalerts and Errors older 90 days?

Regards

Dennis



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to QC

    OK.
    I try this:

    PurgeDB.exe -category=alerts -HistoryLengthInDays=90
    PurgeDB.exe -category=errors -HistoryLengthInDays=90

    But 0 rowas affected.
    But there are Errors or alerts older 90 days…….

  • 0 in reply to Dennis Haschke

    Hello Dennis Haschke,

    I'm not using PurgeDB and I can't test right not but this article suggests you have to specify an -action as well.

    Christian

  • 0 in reply to QC

    Hello,
    this works for me:
    PurgeDB.exe -action=delete -category=alerts -HistoryLengthInDays=90 -type=Virus
    PurgeDB.exe -action=delete -category=alerts -HistoryLengthInDays=90 -type=PUA
    PurgeDB.exe -action=delete -category=alerts -HistoryLengthInDays=90 -type=SuspFile
    PurgeDB.exe -action=delete -category=alerts -HistoryLengthInDays=90 -type=SuspBehavior

    Is it right that Console's Tools -> Configure Reporting -> tab Purge clears all UNACKNOWLEDGED alerts and Errors and ALL Events older x days?
    How can i acknowledge an alert or error?
    Where can i see if an alert is not acknowledge?

    https://community.sophos.com/kb/en-us/109884
    In this article there is as action purge and delete. What is the difference beetween this two Options? 

    Regards
    Dennis


Unfiltered HTML