Documentation forThreat Monitor

Manage network policies

Administrators can edit existing system policies to determine which types of data are archived, indexed, or discarded. The live index is set to a default of 10 days, and archived data is stored for a year.

  1. In Threat Monitor, click the Policies tab.
  2. Select a policy, and then click Edit.
  3. From the Queue type drop-down list, select one of the following options:

    • Archive and Index
    • Archive Only
    • Index Only
    • Discard

    Discarding data is not recommended. However, you can contact SolarWinds Customer Support to filter and drop data at the collector level, so the filtered data can be recovered later, if necessary.

  4. To edit the source IPs and ports, click the Source tab.

  1. To edit the destination IPs and ports, click the Destination tab.