Forensics data will soon exceed a size or age limit

Administrator Help | Forcepoint Web Security | v8.5.x

When forensics data collection is enabled on the Web > Settings > Reporting > Dashboard page in the Forcepoint Security Manager, the administrator sets both a maximum size (in GB) for the repository, and a maximum length of time (in days) for storing forensic data.

When the size of the forensics repository approaches the limit, a health alert is displayed. When the limit is reached, the oldest records are deleted, one day's worth a time, until there is room for new, incoming records to be stored.

If the size limit has not been reached, but records are approaching the maximum record age, the health alert is also displayed. When the age limit is reached, records exceeding that limit are deleted.

There is no mechanism available for retrieving deleted forensic data.