Cortex XDR Agent license

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Cortex XDR Agent license

L3 Networker

If we keep Agent Status Configure the Cortex XDR Agent license revocation and deletion period connection lost as 30 days and Agent Deletion days as180 days will the entry be deleted from the console will it delete logs also for the deleted entries be it agent logs, audit logs, incident alerts, and management logs be also deleted from the console?


L5 Sessionator

Hi @Shashanksinha ,


That is correct. All data associated to that endpoint will be deleted.

Thank you @neelrohit 

We have deleted a few entries just to confirm how can checks logs related to it like incident or alerts triggered for that host in past? 



Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!