Purging Incidents

The ability to purge incidents from OPS-COM allows administrators to permanently remove outdated incident records from the system. This process is critical for maintaining data relevance, complying with data retention policies, and optimizing database performance. This article outlines the two methods for incident purging: individual deletion via incident search and bulk deletion using the Purge Incidents tool.

Setup & Configuration

To enable incident purging capabilities for an administrator, specific permissions must be granted.

•  You must add the "Delete Incidents"Incidents permission to the Adminsspecific youadministrator wantroles or individual administrators who require the ability to givepurge incident records. Consult your system administrator or the User Roles and Permissions wiki article for details on modifying permissions.

---

Using this abilityFeature

to.

1. There are two waysprimary methods for purging incidents in OPS-COM: individually through the Incident Search, or in bulk using the Purge Incidents tool.

   Method 1: Using the Delete Incident Button (Individual Purge)

   This method allows for the deletion of a specific incident after searching for it.

   1. Search for the incident you wish to purge selectedusing Incidents:the eitherstandard byIncident Search functionality.
   2. Once the incident details are displayed, observe the Delete Incident button.
      • The Delete Incident button will be available (active) only if the incident record is older than 7 years.
      • If the incident is less than 7 years old, the button will appear as "Delete Not Available" and will be greyed out, preventing deletion.
   3. If the button is active, click the Delete Incident button.
   4. Follow any subsequent prompts or confirmation messages to finalize the deletion of the incident.

   Method 2: Using the Purge Incidents Tool (Bulk Purge)

   This tool allows for searching and purging multiple incidents simultaneously based on specified criteria.

   1. Click Admin Options.
   2. Click Purge Incidents.
   3. The Search for Incidents to Purge screen will be displayed.
   4. Enter your search criteria into the available fields (e.g., date ranges, incident types, specific IDs).
      • Note: The results displayed will be limited to the oldest 300 records that match your criteria.
      • Note: When entering a particularvalue for "Number of Instances," the search field functions as "greater than or equal to." Therefore, supplying "1" might still display incidents with more than one instance.
   5. Review the displayed list of incidents.
   6. Enable the Delete checkbox next to each incident andyou clickingwish to purge.
   7. Click the "Purge Records button.
   8. A confirmation prompt will display. Click the Delete Incident" button orwithin bythis prompt to confirm the action.

   ---

   Best Practices & Considerations

   • Irreversible Action:
     • Warning: Purging incidents is a permanent and irreversible action. Once an incident is purged, its data cannot be recovered. Exercise extreme caution and verify your selections before proceeding.
   • 7-Year Retention Rule: Be aware of the system's built-in 7-year data retention policy for incidents. Incidents cannot be purged using the "individual button method if they are newer than 7 years. The bulk purge tool will also primarily display older records.
   • Permissions Management: Carefully manage the Delete Incidents permission, granting it only to trusted administrators who understand the irreversible nature of the action.
   • Audit Trail: While the incident record itself is purged, ensure your organization has an appropriate audit trail or backup strategy if long-term historical access to all incident data is required for compliance or other purposes.
   • Pre-Purge Incidents"Review: tool.Before using the Purge Incidents Tool, it is highly recommended to perform a thorough review of the search results and selected incidents to ensure no critical data is inadvertently removed.

Using the Delete Incident Button

1. Search for the incident you wish to purge.  You can see the "Delete Incident" button is available with the incident if it is older than 7 years.
   

   

   
   
   
2. You can see that the "Delete Not Available" button is greyed out when the incident is less than 7 years old.
   

   

Follow the prompts to delete the incident.

Using the Purge Incidents Tool

1. Click Admin Options, Purge Incidents.
   
   
2. The 'Search for Incidents to Purge' screen displays. Enter your criteria. Note, only the oldest 300 records will be displayed.
   Note that the Number of Instances is greater than or equal to the search field. Therefore supplying 1 here could still display incident instances greater than 1. 
   
   
3. Enable the "Delete" checkbox next to the incident you wish to purge. 
   

   

   
   
   
4. Click the 'Purge Records' button. A confirmation prompt will display. Click the 'Delete' button.
   

   

   
   
   
5. The incident will be purged. Note, this is not reversible. Use Caution when deleting records.