How long data is retained in Audit.
CloudSOC keeps the logs for 30 days. "Audit Max Results Retention Duration" can be set between 2 to 12 months.
To check what your "Audit Max Results Retention Duration" is set at, do the following:
Production tenants will retain archived data for up to 1 year before auto-deletion happens.
After the data retention period, services (web apps) which were not used for more than this time will disappear from the list of services under Audit -> Services and Audit ->Summary.
However, Audit will retain comments and tags added by the user and will come back with previously assigned tags and comments once the service is used in the company.
Changes introduced in 3.143:
Any Audit data that is older than 1 year will be deleted, according to the current calendar date. Previously, data retention was based on the last known date of active data processing per data source.