SEC 5.51 automatic Alert deletion?

Hello Dennis,

please see Using PurgeDB.
Haven't checked whether the Console's Tools -> Configure Reporting -> tab Purge indeed only purges unacknowledged alerts.

Christian

OK.
I try this:

PurgeDB.exe -category=alerts -HistoryLengthInDays=90
PurgeDB.exe -category=errors -HistoryLengthInDays=90

But 0 rowas affected.
But there are Errors or alerts older 90 days…….

Hello Dennis Haschke,

I'm not using PurgeDB and I can't test right not but this article suggests you have to specify an -action as well.

Christian

Hello Dennis Haschke,

I'm not using PurgeDB and I can't test right not but this article suggests you have to specify an -action as well.

Christian

Hello,
this works for me:
PurgeDB.exe -action=delete -category=alerts -HistoryLengthInDays=90 -type=Virus
PurgeDB.exe -action=delete -category=alerts -HistoryLengthInDays=90 -type=PUA
PurgeDB.exe -action=delete -category=alerts -HistoryLengthInDays=90 -type=SuspFile
PurgeDB.exe -action=delete -category=alerts -HistoryLengthInDays=90 -type=SuspBehavior

Is it right that Console's Tools -> Configure Reporting -> tab Purge clears all UNACKNOWLEDGED alerts and Errors and ALL Events older x days?
How can i acknowledge an alert or error?
Where can i see if an alert is not acknowledge?

https://community.sophos.com/kb/en-us/109884
In this article there is as action purge and delete. What is the difference beetween this two Options? 

Regards
Dennis