Events retention period on Endpoint security Complete.

Products

• Endpoint Detection and Response
• Endpoint Security Complete

Issue/Introduction

Events retention period on Endpoint security Complete.

Resolution

ICDM Events retention period

• Events are retained and searchable for 30 days
• Events can be streamed (Event Stream) for up to 24 hrs old data points

 

 

For more information on  Event Search API and Event Stream,  

• https://apidocs.securitycloud.symantec.com/#/doc?id=ses_event_search
• https://apidocs.securitycloud.symantec.com/#/doc?id=ses_event_stream