topic Re: Cortex XDR Agent license in Cortex XDR Discussions

Cortex XDR Agent license

Shashanksinha — Thu, 17 Nov 2022 15:52:58 GMT

If we keep Agent Status Configure the Cortex XDR Agent license revocation and deletion period connection lost as 30 days and Agent Deletion days as180 days will the entry be deleted from the console will it delete logs also for the deleted entries be it agent logs, audit logs, incident alerts, and management logs be also deleted from the console?

Re: Cortex XDR Agent license

neelrohit — Thu, 17 Nov 2022 16:11:12 GMT

Hi @Shashanksinha ,

That is correct. All data associated to that endpoint will be deleted.

Re: Cortex XDR Agent license

Shashanksinha — Fri, 18 Nov 2022 06:38:59 GMT

Thank you @neelrohit

We have deleted a few entries just to confirm how can checks logs related to it like incident or alerts triggered for that host in past?