Data Retention Configuration

To help manage data retention, Software Risk Manager offers the following settings to enable the purging of old data:

• findings.purge-after-days [default: unspecified] - if specified, sets the number of days to retain Findings marked as Gone. For example, findings.purge-after-days = 90.

• results.purge-after-days [default: unspecified] - if specified, sets the number of days to retain archived Results. For example, results.purge-after-days = 7.

• visual-log.purge-after-days [default: 30] - if specified, sets the number of days to retain Visual Log entries. For example, visual-log.purge-after-days = 45. Setting the value to -1 will cause all visual log entries to be retained.

• analysis.logs.cleanup-mode [default: expired] - sets what strategy is used to clean up analysis logs. Valid values are:

  • expired - delete analysis logs older than analysis.logs.days-to-keep.
  • archived - delete logs for analyses where all of its inputs are archived.
  • expired-or-archived - delete logs for analyses that are either older than analysis.logs.days-to-keep, or have all of their inputs archived.
  • expired-and-archived - delete logs for analyses that are both older than analysis.logs.days-to-keep, and have all of their inputs archived.
  • disabled - analysis logs are not deleted.

• analysis.logs.days-to-keep [default: 7] - sets the number of days to retain analysis logs if the analysis.logs.cleanup-mode is set to expired, expired-or-archived, or expired-and-archived.

• analysis.logs.cleanup-time [default: 00:00] - sets the time of day that analysis log clean up is ran. A value for this property should be a 24-hour time in the form HH:MM. For example 01:00 for 1 in the morning, or 13:00 for 1 in the afternoon.