This topic lists the CSE data that is retained on the Sumo Logic platform and in CSE, and the retention period for each type of data.
Sumo Logic platform
This table lists where, and for how long, different types of CSE data are retained on the Sumo Logic platform.
|Raw logs||Raw logs reside in your Default Partition in Sumo Logic||The retention period defined for your Default Partition. This period is customer-configurable.|
|CSE Records||Records (normalized logs) are stored in the partitions whose names begin with the string |
There is no additional charge for storage of Records.
|CSE Signals||Stored in the |
There is no additional charge for storage of Signals.
|CSE Insights||The |
There is a charge for storage of Insight-related data in the audit indexes. Note however the volume of data is typically very low compared to log ingestion levels.
|By default, these partitions have a retention period of 30 days. This period is customer-configurable.|
- Insights and Signals that are attached to Insights are retained in CSE indefinitely.
- Signals that are not attached to Insights are retained in CSE:
- For 90 days if suppressed. (As of October 1, 2022, this will change to 30 days.)
- For 365 days if unsuppressed.