Configuring the maximum time period for dashboard charts

By default, charts, counters, and tables on all tabs of the Status > Dashboard page show a maximum of 30 days of data. This limit was chosen to minimize the amount of time it takes to load the Dashboard, optimize Forcepoint Security Manager overall performance, and reduce load on the Log Database.

With Standard and Enterprise versions of Microsoft SQL Server, you can configure dashboard charts to show a longer time period. Extending the maximum time period, however, may have serious performance impacts for both the Security Manager and the Log Database.

  • To change the maximum time period that can be displayed in Risks, Usage, and System dashboard charts, under General Dashboard Data, select a value from the Show a maximum of drop-down list.
    • Increasing the time period does not affect the size of the Log Database, but does increase the time needed to query the database, retrieve information, and update dashboard charts.
    • If you are using Microsoft SQL Server Express, the maximum time period is 30 days, and cannot be changed.
  • To change the maximum time period that can be displayed on the Threats dashboard and Event Details page, under Threats Data, select a value from the Keep Threats data for drop down list.
    • Because detailed Threats data is stored in a separate partition from standard logging data, increasing the time period also increases the size of the Log Database.
    • If threat-related forensic data storage is enabled (see below), the forensics repository attempts to store data for the time period selected here. If, however, the maximum repository size is reached, older records are automatically deleted to make room for newer records.
    • If you are using Microsoft SQL Server Express, the maximum time period is 30 days, and cannot be changed.

Note that data may not always be available for the full period selected. If your web protection solution has only been installed for 7 days, for example, 30-day reports show data for only the 7 days that policy enforcement has occurred.