What is the default asset data retention period in QRadar?

In IBM QRadar, the default asset data retention period is indeed 120 days. This period is significant as it allows organizations to store and analyze asset data for a considerable duration, enabling them to track changes, understand the asset's behavior over time, and assist in identifying potential security incidents.

A retention period of 120 days strikes a balance between retaining useful data for security analysis and compliance, while also managing the storage resources effectively. This timeframe helps in maintaining the historical context necessary for ongoing security assessments and audits.

Organizations may need to adjust this default setting based on their specific compliance mandates, risk management policies, and storage capabilities, but the standard duration provided by QRadar is designed to provide sufficient oversight without overwhelming the system or consuming unnecessary resources.