Delete your behavioral analytics service data
Work with Splunk Support to delete your data at any time. Your data is deleted within 30 days of receiving the request. At this time, deletion of specific data is not supported.
For example, suppose an employee leaves your company and requests that all of the data be deleted as allowed by General Data Protection Regulation (GDPR). In order to fulfill this employee's request, all of the employee's data is deleted. After you make the request to delete data for that employee, do not send further events containing that employee's information. If you do, you must submit a new request to delete any additional events containing that employee's information.
Search for an entity's risk score history from Splunk Mission Control |
This documentation applies to the following versions of Splunk® Enterprise Security: 7.0.0
Feedback submitted, thanks!