Log retention for Audit on Cloudsoc

Products

• CASB Audit

Issue/Introduction

Customers may want to know the logs retention period for the Audit app on Cloudsoc

Environment

CASB Audit

Resolution

• Raw logs are stored for 30 days.
• Failed/invalid logs are stored for 90 days.
• The data displayed on Audit UI (Summary, users, services, destinations, reporting dashboards, widgets) will be stored on our backend system based on the retention period on the CloudSOC settings page, default is 1 year.
• AD synced users, groups and "user group relations" related data which come from LDAP server through spanVA will be stored for 3 to 6 hours and then will be ingested to our CloudSOC. Once users, groups and their relations ingested into CloudSOC then data will be stored until tenant deletion or delete manually.