SCEP Historical Data
 

1. Are SCEP Historical Data (Threat History) stored on a log on the Server?  or does SCCM 2012 read the data from the SCEP Logs on the client?

2. If I'm looking to keep\pull SCEP historical data for 1 year, do I have to edit the "Delete Aged Threat Data" under maintenance task from the default "30" days to "365"?

Just seems strange that the default is 30 days.  I know Auditors require tracking historical data from a year or so.

March 26th, 2014 1:09pm

Hi,

1. it is stored in the CM Database

2. The historical data is maintained by the "Delete Aged Endpoint Protection Health Status History Data" maintenance task and it is set to 365 days by default.

So for the historical data you should be fine whit this setting.

regards,
Jrgen

Free Windows Admin Tool Kit Click here and download it now
March 26th, 2014 2:13pm

Thanks for the quick response Jorgen!

One thing I noticed is when I check for Malware History, I can only get data from the past month. And i know I've had Malware Alerts dating back the past few months.

Do you see any problem with changing the "Delete Aged Data Threat" from 30 days to 365 days?

March 26th, 2014 3:06pm

Yes, I know this is an old post, but Im trying to clean them up. Did you solve this problem, if so what was the solution?

No There will be no problem doing this except for there will be an increase in the database size.

Free Windows Admin Tool Kit Click here and download it now
March 7th, 2015 12:08pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics