SecurityInsight settings · Settings > Guards

One-time repair of stale finding records

Key	SI_Pro_LifecycleStaleOpenRepair
Where	Settings > Guards (safety checks) > Data-quality warnings
Type	enum
Default	off -- nothing is changed
Edition	pro

What it does

A one-time clean-up of the finding history. Before a fix of October 2026, a finding that no CI held could be closed as no longer monitored when it had only moved to a CI, and such a finding could stay open under its old asset key. This repair puts those records right once.

When set

off: nothing. count: nothing is changed; the data sync's log says how many finding records the repair would change and what they would become. apply: once, after a complete collection -- a record whose CI id is empty gets none (nothing visible changes), and a finding still open under an old asset key that the newest collection reports open under its CI is closed as rekeyed (the same finding, now under its CI; not a fix). Nothing is deleted; every other record goes through the usual rule.

When blank or default

Left blank, the default applies: off -- nothing is changed

Risk and how to reverse it

count changes nothing. apply changes finding records once: an empty CI id is cleared, and a finding still open under an old asset key that is open under its CI is closed as rekeyed -- its CI's own record stays open, so no finding disappears from the open list; it only stops being counted twice. Not reversible by the setting (turning it off later does not reopen them); nothing is deleted.

Requires

A SecurityInsight Pro licence.