SecurityInsight settings · Settings > Data & retention
Days before an unseen asset is retired
| Key | SI_Pro_AssetRetire_GraceDays |
|---|---|
| Where | Settings > Data & retention > Assets no longer seen |
| Type | int |
| Default | 30 days |
| Edition | pro |
| Confirmation | SecurityInsight asks you to confirm before it is switched on. |
What it does
How many days an asset SecurityInsight no longer sees may stay unseen before it is retired: its open vulnerabilities close as AssetRetired (never as fixed), its CI in the CI table is retired, and ServiceNow gets the state (u_si_state = retired). Used for every category that has no value of its own.
When set
Until then the asset is listed on Assets & services > CMDB > Not seen anymore with its open findings, where an Admin may retire it early. Seen again = active again, and its findings reopen. Shorter than the seen-window (8 days) is raised to the seen-window; non-numbers use 30.
When blank or default
Left blank, the default applies: 30 days
Risk and how to reverse it
A shorter grace period retires unseen assets sooner -- and closes their open vulnerabilities as retired. A device that is only offline for a while can be retired by mistake. Reversible for the future; closed findings reopen only when the asset is seen again.
Requires
A SecurityInsight Pro licence.
Recommended
30 days (devices can be offline for weeks).
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack