Risk Model instance retention duration

Products

• Information Centric Analytics

Issue/Introduction

What is the default retention duration for risk model instances, and can it be changed?

Environment

Release : 6.x

Component : Risk Models

Resolution

There is no retention setting for risk model instances. Risk model instances are only preserved as long as their underlying event scenario instances are retained (90 days by default), and the underlying events associated with risk model instances through event scenario instances are retained either for a year (by default, for endpoint, authentication, and web activity events) or indefinitely (for Data In Motion or DIM incidents).