Forum Discussion
R_Moeller
Jan 21, 2022Copper Contributor
Deviating retention period in Sentinel than in other Azure Data Sources
Hi community, our company wants to set the retention period for logs of Microsoft Cloud components e.g. Teams, Exchange (Online), ... to 30 days. On the other hand, the data in Sentinel or shou...
GaryBushey
Jan 21, 2022Bronze Contributor
You can also set table level retention if it is an absolute requirement to only keep data 30 days (which I would not recommend since you get 90 days of free storage in MS Sentinel)
https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-cost-storage#retention-by-data-type
https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-cost-storage#retention-by-data-type