SecurityInsight settings · Settings > Collection scope & limits
Sign-in history window
| Key | SI_SignInLookbackDays |
|---|---|
| Where | Settings > Collection scope & limits |
| Type | int |
| Default | 7 days. |
| Edition | Community |
What it does
How many days of sign-in and device logon history the identity and endpoint enrichment look back over.
When set
A longer window catches less frequent sign-ins and device users but makes the queries slower and costlier; a shorter one is cheaper but may miss occasional use.
When blank or default
Left blank, the default applies: 7 days.
Risk and how to reverse it
Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: When weekly activity is too short a window for your users' patterns.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack