Data Retention Configuration

To help manage data retention, Software Risk Manager offers the following settings to enable the purging of old data:

  • findings.purge-after-days [default: unspecified] - if specified, sets the number of days to retain Findings marked as Gone. For example, findings.purge-after-days = 90.

  • results.purge-after-days [default: unspecified] - if specified, sets the number of days to retain archived Results. For example, results.purge-after-days = 7.

  • visual-log.purge-after-days [default: 30] - if specified, sets the number of days to retain Visual Log entries. For example, visual-log.purge-after-days = 45. Setting the value to -1 will cause all visual log entries to be retained.

Findings

When enabled, findings that are marked as Gone and have not been modified for more than the specified number of days will be removed. For a finding to be eligible for removal, it must be marked as Gone and not have been modified recently on all Branches that it is present on. If the finding has been modified recently or has a status other than Gone on any branch, then the finding will be kept on all branches.

Results

When enabled, results coming from Analysis Inputs that have been archived and are older than the specified number of days will be removed. However, results that are associated with findings that are marked as Gone will not be removed. This is done to prevent a scenario where a Gone finding has no associated results (since all results associated with a Gone finding will be archived). Any findings removed per the data retention configuration above do not count toward this condition. Results will be removed on any branch where these conditions are met, regardless of their status in other branches.

Visual Log

When enabled, Visual Log entries that are older than the specified number of days will be removed.