Data Storage and Retention

  • Threat Hunting and Endpoint Data Retention is 90 days by default.

  • Ingestion limit is 110MB, per seat, per day.

  • Additional Data Retention is available for 1 year, by using the Threat Hunting Data Retention SKU/ Events & AIOps SKUs.

For more information, see sk182394.