Event Log item life-time base-line usage guidelines

Permalink: https://doc.oneportal.fi/x/CYB3

On this page we shall give few example use cases and related guidelines for Event Log item life-time.

If using setting "Indefinitely", always monitor disk space and be prepared for real-life surprises.

Remember, it is always possible to select Event Log items by filtering, and then export them out for archival purposes. This, however, is not possible in all use cases.

Base-line settings for enterprise use

Life-time class	Base value	Remarks
General	180 days	Optionally 365 days
Long life-time	3 years	Optionally 4+ years
Permanent	Indefinitely	Fixed setting

Base-line settings for governmental use

External central syslog service and/or SIEM and/or Graylog is strongly recommended and in some cases mandatory.

Life-time class	Base value	Remarks
General	365 days	Optionally 730 days
Long life-time	5 years	Optionally 6+ years
Permanent	Indefinitely	Fixed setting

Base-line settings for healthcare use

External central syslog service and/or SIEM and/or Graylog is strongly recommended and in some cases mandatory.

Life-time class	Base value	Remarks
General	730 days	Idenfinitely is possible but enable it with caution
Long life-time	15 years	Idenfinitely is possible but enable it with caution
Permanent	Indefinitely	Fixed setting

Base-line settings for finance/insurance use

External central syslog service and/or SIEM and/or Graylog is in most cases mandatory.

Life-time class	Base value	Remarks
General	730 days	Idenfinitely is possible but enable it with caution
Long life-time	10 years	Idenfinitely is possible but enable it with caution
Permanent	Indefinitely	Fixed setting

Trivore Identity Service Documentation

NOTE: Trivore ID Documentation has moved to https://trivoreid.com

The content on this site IS OUT OF DATE!

This space has been archived!

Please go ahead to the new site!