Kaspersky Security 9.x for SharePoint Server

Archiving incidents

May 15, 2024

ID 85909

Incident archiving is a process of moving closed incidents to an archive in secure format.

Incident archiving reduces the size of the SQL database and the list of incidents displayed in Management Console.

To launch the Incident Archiving Wizard:

  1. Open Management Console.
  2. In the Management Console tree of nodes, select the Incidents node.
  3. Select closed incidents to be moved to the archive.
  4. Click the Archive button in the workspace of the node.

The application launches the Incident Archiving Wizard.

The interface of the Incident Archiving Wizard consists of a sequence of windows (steps). Use the Back and Next buttons to navigate the windows of the Wizard. To close the Wizard after it finishes, click the Finish button. To exit the Wizard at any step, click the Cancel button.

Starting the Wizard. Selecting incidents to archive

The first window of the Wizard shows information about incidents to be archived. You can archive incidents with the Closed status only.

In the Path to file field, specify the full path to the archive in which the application will save incidents. If you do not specify the name of an archive, the Incident Archiving Wizard creates a new incident archive. The archive name is assigned automatically and contains the date of creation of the earliest incident in the archive and the date of creation of the most recent incident in the archive. The application uses the dates when incidents were created on the server.

You cannot archive incidents with the New or In progress status, as well as incidents previously recovered from an archive.

Creating an archive with incidents

At this step the Wizard performs incident archiving. The incident archiving process is accompanied by a progress bar. Once incident archiving has been completed, the Wizard automatically proceeds to the next step.

Exiting the Wizard

At this step the Wizard announces that the incident archiving process has been completed and shows information on the number of incidents archived. If errors were encountered during the incident archiving process, the Wizard displays information about the incidents that could not be archived.

The following archiving process information is stored in the incident history:

  • Archive name
  • Date and time of the archiving process
  • Name of the user that performed archiving

Incidents added to the archive are removed from the SQL database and from the list of incidents in the Incidents node.

Use these settings for the following tasks

Managing incidents

See also

Incident Archiving Wizard

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.