XSOAR 8 cloud incident retention policy query

assubramania — Mon, 03 Mar 2025 03:10:26 GMT

Hi Team,

The standard XSOAR customer, wants to know how the incident retention policy works on V8 cloud instance.

Data retention policy:
1. Is the default retention period is 6 months (180 days)?

Yes , the default retention period is 6 months (180 days) https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Data-retention-policy
2. Is the data completely and permanently deleted from XSOAR environment after reaching retention limit?

Date deletion from user:
1. Is it possible for the user to delete a file uploaded to an incident?
2. If so, may I assume the deletion log is saved in the incident war room?
3. Is the file completely and permanently deleted from XSOAR environment?

Any advice.

Re: XSOAR 8 cloud incident retention policy query

assubramania — Wed, 05 Mar 2025 03:21:34 GMT

Waiting for the response.

topic Re: XSOAR 8 cloud incident retention policy query in Cortex XSOAR Discussions

XSOAR 8 cloud incident retention policy query

Re: XSOAR 8 cloud incident retention policy query