- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
01-24-2024 01:34 PM
**This question was asked during Part 1 of the webinar series: Indicator Management. You may review the recording here
If we are using Bolt database and an indicator is expired and has a last seen date of September 1, 2023 - does that mean it exists in the September Bolt database file? If we call the indicator command and the last seen date is updated, does this move the indicator to the latest Bolt db file? We want to use XSOAR marketplace integration for Generic Export Indicator service for EDLs but are concerned about potentially losing indicators with data retention efforts, accidental removal, etc. Losing indicators for an Allow list would be dangerous.
01-24-2024 01:35 PM
A reply by @Aneesha More:
If we are using Bolt database and an indicator is expired and has a last seen date of September 1, 2023 - does that mean it exists in the September Bolt database file? If we call the indicator command and last seen date is updated does this move the indicator to latest Bolt db file? We want to use XSOAR marketplace integration for Generic Export Indicator service for EDLs but are concerned about potentially losing indicators with data retention efforts, accidental removal, etc. Losing indicators for an Allow list would be dangerous.
01-24-2024 01:35 PM
A reply by @Aneesha More:
If we are using Bolt database and an indicator is expired and has a last seen date of September 1, 2023 - does that mean it exists in the September Bolt database file? If we call the indicator command and last seen date is updated does this move the indicator to latest Bolt db file? We want to use XSOAR marketplace integration for Generic Export Indicator service for EDLs but are concerned about potentially losing indicators with data retention efforts, accidental removal, etc. Losing indicators for an Allow list would be dangerous.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!