The retention period for threat event and incident queries is 3 days.
Queries that exceed the retention period succeed but only threat events from the last 3 days are returned.
Data retention period
- Published on Sep 3, 2026
- 1 minute(s) read
Was this article helpful?