Events retention period on Endpoint security Complete.
search cancel

Events retention period on Endpoint security Complete.

book

Article ID: 209446

calendar_today

Updated On:

Products

Endpoint Detection and Response Endpoint Security Complete

Issue/Introduction

Events retention period on Endpoint security Complete.

Resolution

ICDM Events retention period

  • Events are retained and searchable for 30 days
  • Events can be streamed (Event Stream) for up to 24 hrs old data points

 

 

For more information on  Event Search API and Event Stream,  

  • https://apidocs.securitycloud.symantec.com/#/doc?id=ses_event_search
  • https://apidocs.securitycloud.symantec.com/#/doc?id=ses_event_stream