Viewing events for the last 12 months in CloudSoc Investigate page

Products

• CASB Gateway Advanced
• CASB Gateway
• CASB Audit
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS
• CASB Advanced Threat Protection

Issue/Introduction

In Cloudsoc Investigate page can I generate a table with the number of events in the last 12 months?

For example:  (From Feb - 2023 To Feb - 2024)

Resolution

In the CloudSoc we only have 3 months events selectable that are retained and viewable in the Investigate page. 

You can however access the archive information which is kept for 12 months. You can download the zipped file manually to your system. After that you have to view it manually. 

Please review this Symantec CloudSOC documentation Archiving metadata as you may need to check under your Settings / Archive.