Select Aging Settings on the Configure menu. The Aging Settings page appears.
In the Indicator & Alert Aging box on the Aging Settings page, specify an aging interval in the Delete alerts after: box. Valid values range from 1 through 365 days. This sets and enables the aging interval.
Click Save to save your changes.
Note
To restore default settings, click Reset to default, and then click Save. If you click Cancel, Endpoint Security (HX) will return settings to the most recently saved values.
Endpoint Detection and Response with Forensics (EDRF) > Detect and handle potential threats with EDRF > Configure EDRF to detect potential threats > Threat detection using IOC rules > Threat detection using IOC rules in the Forensics workspace > Indicator rule aging > Specify indicator rule aging settings