Go to the table of contents Go to the previous page Go to the next page View or print as PDF
General System Settings > Archive storage
Archive storage
Administrator Help | Forcepoint DLP | Version 8.7.x
Related topics:
The incident database is partitioned quarterly. Archiving partitions optimizes performance. Use the Settings > General > Archive Storage page to specify where to store the incident archives and how much disk space to allow.
(Archive partitions on the Settings > General > Archive Partitions page.)
To begin, select whether to use local or remote storage.
*
If you select Store archive locally, archive files are stored in the location configured during installation (displayed in the Archive Folder field).
The Maximum Archive Disk Space value is also displayed. This value cannot be changed.
*
If you select Store archive remotely, define a location for the archive files as follows:
 
Click Test Connection to make sure the Forcepoint DLP server can access the storage location. This ensures the path is valid (hostname and folder) and also checks the access credentials.
When you are finished, click OK to save your changes.
Disk space calculation
The amount of disk space needed for the incident archive depends primarily on:
*
The total size of the transactions resulting in incidents—in other words, the size of the email messages, HTTP posts, printed files, and so on, that violated policy.
Estimate total transaction size using the following formula:
(number of incidents per quarter) * (average transaction size) * 12
The product is multiplied by 12, because the system allows 12 archived partitions or 3 years of data.
*
To see the number of incidents you've had this quarter, view the Incident Trends report (Main > Reporting > Data Loss Prevention > Incident Trends).
*
*
The metadata size can vary depending on the number of policies used and on incident complexity. Incident complexity is a factor of the number of policies, rules, content classifiers, and violation triggers that are involved. Generally, metadata takes no more than 10-20 bytes of information per incident. Use the Incident Trends report to gain visibility into the number of DLP incidents.
Estimate expected metadata size using the following formula:
(number of incidents per quarter) * 20 bytes * 12
The total disk space required is the sum of the first and second result.
Depending on these factors, an archive containing 100,000 incidents could be between 10-20 MB and 1 GB.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
General System Settings > Archive storage
Copyright 2020 Forcepoint. All rights reserved.