An kind of limitations on the metadata which gets collected on the either the CSPM side or CWPP side? As multi cloud environments grow, are there any limitations on retention of that data? If you want to run RQLs from 5 years ago or more is that something you would have available or is it limited to the retention of say CloudTrail logs in AWS etc?
Data Prisma Cloud processes is retained in accordance with the Prisma Cloud retention schedule. Audit logs from cloud providers and Prisma Cloud audit logs older than 120 days are regularly purged from the live system, as are flow logs older than 45 days. This data is retained in an archived, encrypted form for the duration of the customer contract. Alerts are currently kept for the duration of the service. Configuration of assets active in the cloud environment is retained for the duration of the service as well. Upon termination of the service, data in live systems is stored for up to 60 days, after which it will be deleted from live systems. Purge of backup data may take up to an additional 60 days.
I hope the answer helps you?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!