SecurityInsight settings · Settings > Collection scope & limits
Public IP discovery lookback
| Key | SI_Shodan_LookbackDays |
|---|---|
| Where | Settings > Collection scope & limits |
| Type | int |
| Default | 8 days. |
| Edition | Community |
What it does
How far back the engine looks in the endpoint and Azure profile tables to find classified assets with public IPs.
When set
Each asset's latest snapshot within the window is used. A shorter window drops assets not seen recently; a longer one keeps retired assets in scope.
When blank or default
Left blank, the default applies: 8 days.
Risk and how to reverse it
Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.
Requires
Read by: publicip.
Recommended
Keep the default. Change it when: When profiling runs less often than weekly.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack