Threat events are only removed when running ePO purge events server tasks, otherwise they are kept in the database.
Hello @User60808420
Thanks for your post.
It will be going to be stored in the database till you are not removing.
It is recommended to have a maintenance job for your database.
If you want to remove the events you can create a Server Task for purging the events based on your requirements.
Also there are couple of KB articles available for purging the events from database.
For Eg:
https://kc.mcafee.com/corporate/index?page=content&id=KB68961
https://kc.mcafee.com/corporate/index?page=content&id=KB91748
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA