{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/review-restic-retention-groups-before-counting-snapshots-to-keep/", "item": { "id": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/", "slug": "review-restic-retention-groups-before-counting-snapshots-to-keep", "url": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep.md", "json": "https://update.dsesecurity.com/api/v1/posts/review-restic-retention-groups-before-counting-snapshots-to-keep/" }, "title": "Review restic retention groups before counting snapshots to keep", "summary": "Calculate retention against the selected host, path, and tag groups before enabling removal.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-10-15T13:33:11+00:00", "modified_at": "2026-10-15T13:36:16+00:00", "reviewed_on": "2026-10-15", "reading_minutes": 2, "word_count": 254, "potentially_affected": "This applies to the stable restic forget policy documented here. It addresses snapshot selection and grouping, rather than the separate space-reclamation behavior of prune or Proxmox garbage collection.", "dse_recommendation": "DSE recommends making an example inventory part of every retention-policy review.", "primary_source": { "name": "restic — Removing Backup Snapshots", "url": "https://restic.readthedocs.io/en/stable/060_forget.html", "published_on": null, "authority": "restic.readthedocs.io" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Calculate retention against the selected host, path, and tag groups before enabling removal.

\n

Source facts

\n

Restic forget applies policy separately to snapshot groups, which by default are based on hostname and backed-up paths. The group-by option can change that grouping or disable it with an empty value. Tag filtering has its own logic: comma-separated tags in one argument require all those tags, while repeated tag arguments are combined as alternatives. A keep-last count therefore cannot be interpreted correctly without knowing both the selected snapshot set and the grouping used for policy application.

\n

Source: restic — Removing Backup Snapshots.

\n

Applicability

\n

This applies to the stable restic forget policy documented here. It addresses snapshot selection and grouping, rather than the separate space-reclamation behavior of prune or Proxmox garbage collection.

\n

DSE recommendation

\n

DSE recommends making an example inventory part of every retention-policy review. Include more than one host, a changed source-path set, and the actual tag combinations used by automation. State whether the desired count applies independently to each group or across the selected set. Keep filtering and keeping rules visible together so reviewers do not approve a number without seeing what it counts. Preserve a preview of removals before any scheduled policy begins affecting production history.

\n

Verification

\n

On disposable snapshots, run a policy preview with the intended host, path, tag, and grouping options. Compare retained snapshots with a manually calculated inventory. Include a changed-path or renamed-host case, and retain the final command and review evidence before enabling automated removal.

\n

Official reference

\n

restic — Removing Backup Snapshots. Reviewed October 15, 2026.

", "content_text": "Calculate retention against the selected host, path, and tag groups before enabling removal.\nSource facts\nRestic forget applies policy separately to snapshot groups, which by default are based on hostname and backed-up paths. The group-by option can change that grouping or disable it with an empty value. Tag filtering has its own logic: comma-separated tags in one argument require all those tags, while repeated tag arguments are combined as alternatives. A keep-last count therefore cannot be interpreted correctly without knowing both the selected snapshot set and the grouping used for policy application.\nSource: restic — Removing Backup Snapshots.\nApplicability\nThis applies to the stable restic forget policy documented here. It addresses snapshot selection and grouping, rather than the separate space-reclamation behavior of prune or Proxmox garbage collection.\nDSE recommendation\nDSE recommends making an example inventory part of every retention-policy review. Include more than one host, a changed source-path set, and the actual tag combinations used by automation. State whether the desired count applies independently to each group or across the selected set. Keep filtering and keeping rules visible together so reviewers do not approve a number without seeing what it counts. Preserve a preview of removals before any scheduled policy begins affecting production history.\nVerification\nOn disposable snapshots, run a policy preview with the intended host, path, tag, and grouping options. Compare retained snapshots with a manually calculated inventory. Include a changed-path or renamed-host case, and retain the final command and review evidence before enabling automated removal.\nOfficial reference\nrestic — Removing Backup Snapshots. Reviewed October 15, 2026.", "content_markdown": "Calculate retention against the selected host, path, and tag groups before enabling removal.\n\n## Source facts\n\nRestic forget applies policy separately to snapshot groups, which by default are based on hostname and backed-up paths. The group-by option can change that grouping or disable it with an empty value. Tag filtering has its own logic: comma-separated tags in one argument require all those tags, while repeated tag arguments are combined as alternatives. A keep-last count therefore cannot be interpreted correctly without knowing both the selected snapshot set and the grouping used for policy application.\n\nSource: [restic — Removing Backup Snapshots](https://restic.readthedocs.io/en/stable/060_forget.html).\n\n## Applicability\n\nThis applies to the stable restic forget policy documented here. It addresses snapshot selection and grouping, rather than the separate space-reclamation behavior of prune or Proxmox garbage collection.\n\n## DSE recommendation\n\nDSE recommends making an example inventory part of every retention-policy review. Include more than one host, a changed source-path set, and the actual tag combinations used by automation. State whether the desired count applies independently to each group or across the selected set. Keep filtering and keeping rules visible together so reviewers do not approve a number without seeing what it counts. Preserve a preview of removals before any scheduled policy begins affecting production history.\n\n## Verification\n\nOn disposable snapshots, run a policy preview with the intended host, path, tag, and grouping options. Compare retained snapshots with a manually calculated inventory. Include a changed-path or renamed-host case, and retain the final command and review evidence before enabling automated removal.\n\n## Official reference\n\n[restic — Removing Backup Snapshots](https://restic.readthedocs.io/en/stable/060_forget.html). Reviewed October 15, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/", "url": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-15" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Review restic retention groups before counting snapshots to keep", "item": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/#article", "identifier": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/", "url": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/", "headline": "Review restic retention groups before counting snapshots to keep", "description": "Calculate retention against the selected host, path, and tag groups before enabling removal.", "abstract": "Calculate retention against the selected host, path, and tag groups before enabling removal.", "articleBody": "Calculate retention against the selected host, path, and tag groups before enabling removal.\nSource facts\nRestic forget applies policy separately to snapshot groups, which by default are based on hostname and backed-up paths. The group-by option can change that grouping or disable it with an empty value. Tag filtering has its own logic: comma-separated tags in one argument require all those tags, while repeated tag arguments are combined as alternatives. A keep-last count therefore cannot be interpreted correctly without knowing both the selected snapshot set and the grouping used for policy application.\nSource: restic — Removing Backup Snapshots.\nApplicability\nThis applies to the stable restic forget policy documented here. It addresses snapshot selection and grouping, rather than the separate space-reclamation behavior of prune or Proxmox garbage collection.\nDSE recommendation\nDSE recommends making an example inventory part of every retention-policy review. Include more than one host, a changed source-path set, and the actual tag combinations used by automation. State whether the desired count applies independently to each group or across the selected set. Keep filtering and keeping rules visible together so reviewers do not approve a number without seeing what it counts. Preserve a preview of removals before any scheduled policy begins affecting production history.\nVerification\nOn disposable snapshots, run a policy preview with the intended host, path, tag, and grouping options. Compare retained snapshots with a manually calculated inventory. Include a changed-path or renamed-host case, and retain the final command and review evidence before enabling automated removal.\nOfficial reference\nrestic — Removing Backup Snapshots. Reviewed October 15, 2026.", "datePublished": "2026-10-15T13:33:11+00:00", "dateModified": "2026-10-15T13:36:16+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/review-restic-retention-groups-before-counting-snapshots-to-keep/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Review restic retention groups before counting snapshots to keep" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 254, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "restic — Removing Backup Snapshots", "url": "https://restic.readthedocs.io/en/stable/060_forget.html" } } ] } }