How long are my events stored?

Applies to Deep Security as a Service only

The event history setting for Deep Security is currently 13 weeks. On May 15, 2017, the event retention period will be reduced to 32 days. Customers requiring a long duration event retention period should consider exporting events to an external SIEM. For more information on how to do this, see Forward events to an external Syslog or SIEM server.

Event history is retained for:

  • Anti-malware events
  • Application control events
  • Firewall events
  • Integrity monitoring events
  • Intrusion prevention events
  • Log inspection events
  • Web reputation events
  • System events

To view your events, in Deep Security Manager, go to Events & Reports.