You can configure the retention period to store event logs, audit logs, etc. for Zscaler ITDR. When the retention period expires, the data is permanently deleted.

The default event retention period is 365 days. The retention policy is defined in the ITDR license agreement. The retention period can be modified to store logs and data for a shorter time.

To configure the retention period:

1. Go to Settings > Advanced Settings > Retention.

2. Enter the retention period in days.

   See image.

   

   Close

3. Click Save.

Events that are marked as safe are retained for 7 days. This period cannot be modified.