SecurityInsight settings · Settings > Guards
Audit trail retention setting
| Key | SI_Guard_AuditRetentionRefused_Enabled |
|---|---|
| Where | Settings > Guards (safety checks) > Other checks |
| Type | On / off |
| Default | Off |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched off. |
What it does
The safety check that protects the audit trail: The audit trail retention setting (SI_Pro_AuditRetentionMonths) is not a whole number of at least 13 months, so nothing was removed.
When enabled
the check works as described on the Guards page.
When disabled
no event and no mail. The step itself still stops, because the retention setting is not valid.
Risk and how to reverse it
Turning this check off removes a protection: when its condition happens, nothing holds or stops the step and no event is raised. Reversible at once: switch it back on; it applies from the next run.
Requires
Works only while "All guards (safety checks)" is on.
Recommended
Keep the default (off) unless you want this check to hold or stop the step. Change it when: Off by default: only the two brakes stay on (CIs retired by mistake, duplicate vulnerability records) -- this check is a warning you can switch on. Turn it on when you want it to hold or stop the step, and mail, again.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack