- Advanced Analytics
- Understand the Basics of Advanced Analytics
- Configure Log Management
- Set Up Admin Operations
- Set Up Authentication and Access Control
- Additional Configurations
- Configure Rules
- Exabeam Threat Intelligence Service
- Threat Intelligence Service Prerequisites
- View Threat Intelligence Feeds
- Threat Intelligence Context Tables
- View Threat Intelligence Context Tables
- Assign a Threat Intelligence Feed to a New Context Table
- Create a New Context Table from a Threat Intelligence Feed
- Check ExaCloud Connector Service Health Status
- Exabeam Cloud Telemetry Service
- Manage Security Content in Advanced Analytics
- Health Status Page
View Storage Usage and Retention Settings
By default, Advanced Analytics implements data retention settings for logs and messages. This allows the system to automatically delete old data, which reduces chances of performance issues due to low repository space.
Available on the System Health page, the Storage Usage tab provides details regarding the current data retention settings for your Advanced Analytics deployment, including:
HDFS Data Retention – Number of days the data has been stored, the number of days remaining before it is automatically deleted, and a toggle to enable/disable auto-deletion of old data.
Note
If enabling or disabling Auto-delete Old Data, you must also restart the Log Ingestion Engine before the change goes into effect.
A warning message appears if the average rate of HDFS usage exceeds the intended retention period.
HDFS Usage – Total HDFS usage, including specific breakdowns for logs, events on disk, and events in database .
Note
The Volume field displays the compressed index size on disk for storage planning. This differs from the total consumption of daily ingested logs used for billing.
MongoDB Retention – A dialog to set retention settings and a toggle to enable/disable disk-based deletion of old data.
You can edit the MongoDB data retention settings by clicking the pencil icon.
The capacity used percentage threshold is set to 85% by default, with a maximum value of 90%. It helps to prevent MongoDB from reaching capacity before hitting the default retention period threshold. As soon as MongoDB meets the percentage on any node, the system will start purging events until it is back below the capacity used threshold.
The maximum length of your retention period depends on the license you purchased. For licensing information, see Product Entitlements on the Exabeam Community site.
Note
The Days for Triggered Rules & Sessions value cannot be less than the Days for Events value.
MongoDB Usage – Total MongoDB usage.