Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Delete "Discover Targets" without deleting incidents

Created: 21 Jun 2010 | 1 comment
Naor Penso's picture
6 Agree
0 Disagree
+6 6 Votes
Login to vote

Today,
In order to delete a scan server (for example Network Discover) you need to delete the Discover targets associated with the server,
and when you try to delete the discover targets you need to delete the incidents associated with the discover target.
This feature enhancement is divided into 2:
1) Allow the deletion of discover targets without deleting the incidents - I cant understand why should i lost valuable data just because i want to delete the scan that found those issues/Incidents!
2) Allow to change the discover server responsible for the discover scans on the fly (meaning that on the discover scan settings i will be able to choose on which discover server the scan would run).

Thanks.
Naor

Comments 1 CommentJump to latest comment

Alex Foley's picture

It would be nice to be able to delete the target without deleting associated incidents (or deleting the incidents for you when deleting the target), but we'd then need an "optimize" function to be able to find orphaned incidents since so much of DAR reporting is based around targets, I would think...

Finding response rules not in use, finding statuses not in use, finding policies with 0 incidents, etc., are all the types of things I'd like to see under an Optimize feature.

---
Alex Foley

0
Login to vote