PHD Discussions Logo

Ask, Learn and Accelerate in your PhD Research

Question Icon Post Your Answer

Question Icon

7 months ago in Cybersecurity By Veena

How Long Does OSSIM Keep My Logs For?

I'm setting up OSSIM/AlienVault and planning our log storage. What's the default log retention period out of the box, and can we change it if we need to keep logs longer for compliance?

All Answers (1 Answers In All)

By Suma Answered 3 months ago

By default, OSSIM keeps logs in its active database for 30 days. After that, they're purged and you can't search for them through the normal interface anymore. The good news is this is totally configurable! You can adjust the retention policy to meet your specific needs, whether it's for longer forensic investigations or regulatory requirements. Just make sure your storage can handle it.

Your Answer