Audit log retention period

What is the retention period for audit logs?

This is a setting that you can set yourself in the audit logs export configuration from control panel: you can set the starting date as well as the desired retention (you can also decide keep everything).

1 Like

thank you.
I have already exported the audit logs to a dataset, but I don’t remember what I set for the retention period, is it possible to check it somewhere?

The quickest would be to sort your ingest by ascending time to get the earliest date of your data!
You can also delete it and recreate it if you want to set something different.

1 Like

When creating an “audit log dataset”, I can specify “Retention in days (max 2 years)”, but if I do not specify this, will the retention period be 2 years?

If you do not set retention, no retention rule will be applied to your export dataset.

Thank you for your reply.
Does this mean that unless a retention period is set, audit logs will not be deleted even after two years?
Sorry for asking you so many questions.

Don’t worry about it!
That is correct :slight_smile:

1 Like

Clarifying for posterity that the retention period configured for audit logs is based on when the files are added to the dataset, not the timestamp field in the data, so sorting by ascending time is of limited usefulness here (unless by “time” you mean file-added time as shown in the dataset’s “Details → Files” tab). However, you should be able to easily confirm the configured retention period for an audit log dataset by looking at the dataset’s “Details → Retention policies” tab.

2 Likes