Skip to content

Latest commit

 

History

History
27 lines (19 loc) · 1.78 KB

configure-data-retention-archive.md

File metadata and controls

27 lines (19 loc) · 1.78 KB
title description author ms.topic ms.date ms.author
Configure interactive and long-term data retention in Microsoft Sentinel
Towards the end of your deployment procedure, you set up data retention to suit your organization's needs.
cwatson-cat
how-to
07/21/2024
cwatson

Configure interactive and long-term data retention in Microsoft Sentinel

In the previous deployment step, you enabled the User and Entity Behavior Analytics (UEBA) feature to streamline your analysis process. In this article, you learn how to set up interactive and long-term data retention, to make sure your organization retains the data that's important in the long term. This article is part of the Deployment guide for Microsoft Sentinel.

Configure data retention

Retention policies define when to remove data, or mark it for long-term retention, in a Log Analytics workspace. Long-term retention lets you keep older, less used data in your workspace at a reduced cost. To set up data retention plans, consult Log retention plans in Microsoft Sentinel, and use one or both of these methods, depending on your use case:

Next steps

In this article, you learned how to set up interactive and long-term data retention.

[!div class="nextstepaction"]

Perform post-deployment steps