FAQ: Can Threat Stack remove Agents from our servers?

Follow

Threat Stack automatically revokes Agents that are offline for seven days in a row. Threat Stack disables the revoked Agent on your server, removes the agentID, and stops trying to connect to the Agent. As a result, the following occurs with Agent data:

  • Data about the Agent itself permanently deletes from the Threat Stack Cloud Security Platform®.
  • Alerts and events associated with alerts remain in the Platform.
  • Event data not associated with alerts ages out of Threat Stack according to the data retention rules established on the Platform.
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.