Data Storage and Retention
-
Threat Hunting and Endpoint Data Retention is 90 days by default.
-
Ingestion limit is 110MB, per seat, per day.
-
Additional Data Retention is available for 1 year, by using the Threat Hunting Data Retention SKU/ Events & AIOps SKUs.
For more information, see sk182394.