SecurityInsight settings · Settings > Collection scope & limits

Active asset freshness window

Key	SI_ActiveStaleDays
Where	Settings > Collection scope & limits > Which assets are included
Type	int
Default	30 days
Edition	Community
Confirmation	SecurityInsight asks you to confirm before it is switched on.

What it does

Sets how recently an asset must have been seen (or an identity signed in) to count as active.

When set

Lower values mark more assets inactive; inactive endpoints are left out of the profile output and identities without a recent sign-in are flagged inactive. Higher values keep older, possibly retired assets in reports.

When blank or default

Left blank, the default applies: 30 days

Risk and how to reverse it

A shorter value marks more assets inactive: devices not seen within it leave the profiles and reports (a device offline for a week or two can drop out). Reversible: the next run includes them again.

Requires

Read by: azure, endpoint, identity, publicip.