Cortex XDR default retention: 31 days ingested data, 186 days case and issue data
Catalog row in Vendor License Rules · Cited
- Kind
- Entitlement
- Statement
- Data retention in Cortex XDR: ingested data is retained 31 days for per Endpoint, Cloud per Host and per GB licences (not applicable to Prevent); case, issue and query data 186 days; Cortex XDR Prevent case and issue retention requires a minimum of 200 endpoints; hot storage retention add-ons require at least 1 month and cold storage at least 6 months.
- Applies when
- Sizing Cortex XDR data retention and retention add-ons.
- Applies to
- Cortex XDR Prevent, per Endpoint, Cloud per Host, per GB.