Cleaning the SIM Data Model
Cleaning the SIM data model ensures that offenses are based on the most current rules, discovered servers, and network hierarchy. When the tuning process is complete, clean the SIM data model to ensure that JSA displays only recent offenses.
When you clean the SIM data model, all existing offenses are closed. Cleaning the SIM data model does not affect existing events and flows.
False positive offenses might occur before you complete the tuning tasks. Clean the SIM data model to ensure that each host on the network creates new offenses based on the current configuration.
There are two ways of cleaning the SIM data model:
Soft Clean | Closes all offenses, but does not remove them from the system. |
Hard Clean | Closes all offenses, and completely erases them from the system. |
It is not advised to perform a Hard Clean of your SIM Model, unless directed by JSA Support. Both a Hard Clean and a Soft Clean result in the console webserver being restarted.