Define data retention on closed cases

Supported in:

Google secops SOAR

You can define the retention period for information about closed cases. You can set the period either for all environments or individually. The retention time period starts from when the case or cases were closed.

Note: If you select the per environment checkbox, go to Organization > Environments, select the environment you want to edit, click Edit, and then select the new timeframe.

Your customer license defines the maximum retention timeframe. To extend it, contact Google SecOps Support.

To configure data retention, follow these steps:

1. Go to Settings > Advanced > General.
2. Select the time period. The default period is 12 months.
3. Optional: Select Allow Data Retention Period per Environment.
4. Click Save.

Need more help? Get answers from Community members and Google SecOps professionals.