I need a solution
Hello community
It might be an easy one, but it is confusing me:
At the beginning of the week, I was pulling a risk log from the SEPM. We did some testing with EICAR files last week and I had to collect the logs for an auditor.
Everything alright, pulled the logs and delivered them.
Now, I wanted to do the same for other reasons but there are no more EICAR events anymore in the DB.
We, in fact, have configured the EICAR events to be deleted in the Risk Log Settings of the database.
So I am properly confused: Do these kind of events get therefore deleted based on another schedule than the rest of entries in the Risk Log? Or why are there no more EICAR events to be found in the log?
Cheers