Data retention periods
The following table describes the standard Data Retention Period per product available in Unified Security Service.
Product | Retention Period |
Web Security (including Gateway and Agent Anti-malware) | 31 days |
Cloud Application Control Broker (API mode) | 31 days |
Cloud Application Control Broker (Inline mode) | 31 days |
Email Security | 31 days |
Cloud Multi-Factor Authentication (powered by Entrust) | 31 days |
Audit | 31 days |
Posture Management | 31 days |
Quarantine | 31 days |
What happens after the retention period ?
How far back can I query log data in the dashboard?
You can query log data within the last 31 days, however please note that it may not be feasible to return all the results on a large data set. Always try and specify as many criteria as possible to narrow down your search. Some data sets have the ability to easily return millions of rows for a short period of time (Excel can only open files with less than 1M rows). Also consider Log Streaming as an option.