Endpoint Standard: Is Log Recovery possible beyond six months of retention?
book
Article ID: 291711
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Is it possible to retrieve and investigate logs for an event that has occurred beyond the log retention time (6 months)?
Environment
Endpoint Standard (formerly CB Defense): All supported versions
Resolution
Carbon Black can only store the alerted events and alerts for 180 days (6 months). There is no way to go beyond those and retrieve anything beyond 6 months