Duration of data retention for Audit in CloudSOC

Products

• CASB Audit
• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard

Issue/Introduction

How long data is retained in Audit.

Resolution

CloudSOC keeps the logs for 30 days. "Audit Max Results Retention Duration" can be set between 2 to 12 months.

To check what your "Audit Max Results Retention Duration" is set at, do the following:

1. Go to Settings by clicking on the Gear Icon in the top right corner of the page
   
   
   
2. Go to the Privacy tab.
   
   
   
3. Check the "Audit Max Results Retention Duration" setting
   

Production tenants will retain archived data for up to 1 year before auto-deletion happens.

After the data retention period, services (web apps) which were not used for more than this time will disappear from the list of services under Audit -> Services and Audit ->Summary.

However, Audit will retain comments and tags added by the user and will come back with previously assigned tags and comments once the service is used in the company. 

Additional Information

Changes introduced in 3.143:

Any Audit data that is older than 1 year will be deleted, according to the current calendar date. Previously, data retention was based on the last known date of active data processing per data source.

Reference:

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/symantec-cloudsoc/cloud/release-notes/CloudSOC-release-notes/cloudsoc-3143-rn.html