ingested data retention - 30 days

[NormSil]

Hi guys,

I've purchased PAN-XDR-PRO-GB SKU and i've noticed we get 30 days of ingested data retention and 180 days of incident or alert retention.

Can we keep ingested data for more than 30 days? and/or incident alert retention for more than 180 days? is there any SKU's for that?

Thanks

Cortex XDR 

[jtalton]

Hi Normsil, 

Yes, you can extend & purchase additional license retention depending on your requirements for hot and cold storage.

Please reference License Retention • Cortex XDR Pro Administrator Guide • Reader • Palo Alto Networks documentation p... for additional details about Data Storage options. Your SE should be able to assist you with the purchase.

If you found this answer helpful, please select Accept as Solution.

Thank you!