Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
492
Views
0
Helpful
3
Replies

Purging events/sessions/incidents

mohsin.khan
Level 3
Level 3

‎02-14-2009 02:14 AM

I came to know (v 4.3) that once the events are logged to MARS, we cannot delete or purge them.. i want to know that if i want to delete the redundant events, or sessions or incidents, ones that i don't need anymore, is there a fix for that in >6 or 6.1.??

Labels:
0 Helpful
3 Replies 3

Farrukh Haroon
VIP Alumni
VIP Alumni

‎02-15-2009 02:01 AM

AFAIK this behaviour has not changed.

Regards

Farrukh

0 Helpful

rajett
Cisco Employee
Cisco Employee

‎02-16-2009 08:27 AM

No. Once an item is logged to MARS, the only way for it to go is to eventually drop off the back end of the database as old data is purged automatically to make room for newer data.

0 Helpful

mohsin.khan
Level 3
Level 3
In response to rajett

‎02-16-2009 07:16 PM

Hi Raymond, can you please elaborate "eventually drop off the back end of the database "..

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents