SecurityInsight settings · Settings > Guards

Far fewer assets from a source: what to do

Key	SI_Pro_SourceDropout_AssetDropAction
Where	Settings > Guards (safety checks) > Data-quality warnings
Type	enum
Default	confirm
Edition	pro

What it does

What happens when a source's collection completes with far fewer assets than its last good collection (down by the data-quality asset drop limit or more). That can be a real clean-up, for example many Azure resources removed, or a source that answered only in part.

When set

confirm: the last good collection is kept (nothing is marked not seen), the run goes on, and the drop is accepted by itself when the next complete collection of that source shows the same level -- a real clean-up takes effect one run later. accept: the collection is taken as it comes and the safety check only reports it.

When blank or default

Left blank, the default applies: confirm

Risk and how to reverse it

Accept: a source that answered only in part is taken as the truth at once -- the assets it no longer lists are marked not seen, and their CIs retire after the usual days. Confirm (the default) costs one run when a clean-up is real. Reversible at once; it applies from the next collection.

Requires

A SecurityInsight Pro licence.