Forum Discussion
retention logs on a specific entity
Hello, Do you know if there is a way for extending the retention logs in defender regarding a specific entity ? Thank you,
ClemBleu Hi, extending retention logs for a single entity, such as a user or device, is not supported in the default configurations.However, you can export entity data to external systems such as Azure Log Analytics or SIEM for longer retention. Or, you can use Azure Monitor Logs to set custom retention policies for specific data.