SecurityInsight settings · Settings > Connectors & CMDB

Asset properties

Key	SI_AssetProperties
Where	Settings > Connectors & CMDB > Asset properties
Type	enum
Default	security: the security profile only -- what SecurityInsight needs for risk
Edition	pro

What it does

How much SecurityInsight keeps about each asset: security (what SecurityInsight needs for risk) or full (all metadata from every source, kept a few days).

When set

'security' (the default) keeps what SecurityInsight needs for risk -- name, kind, tier and the security fields each profile carries -- and stores nothing extra. 'full' also keeps every property each source knows about an asset -- Defender, Entra, Intune, Active Directory, Azure, Exposure Graph and VM extensions, including serial numbers and MAC addresses. Each source is still read only once: the profiler reads it with every property and builds the same security profile from it, so the profile does not change. The whole objects go to SI_AssetProperties_CL for the CMDB and vulnerability hand-off, and the data sync stores them in the Pro database, where the asset page shows them under "Full metadata" per source (lists stay lists), with a history of every snapshot kept and what changed between them. It is kept for the days set in "Full asset metadata: days kept" (default 3). Full adds Log Analytics ingest on every run; switching back to security stops the collection, and what was stored ages out after those days.

When blank or default

Left blank, the default applies: security: the security profile only -- what SecurityInsight needs for risk

Risk and how to reverse it

Affects what SecurityInsight writes to your CMDB or ticketing systems. Reversible for future runs, but changes already written there stay; the connector's own guards hold large or unsafe changes.

Requires

A SecurityInsight Pro licence.