How Your License Affects Data Storage Policies

You can divide data into storage groups, which allows you to partition the incoming events data and provide different retention periods, based on the query filter. To preserve space in the database and improve data retrieval from storage groups, you can configure the database to remove events older than a certain number of months. Your product license affects the maximum value that you set for the data retention policy. If you have deployed multiple capabilities in the ArcSight Platform, the product license that allows the longest maximum value takes precedence over the maximum allowed value of the other licenses.

Product License	Maximum retention value
Intelligence	30 days
Recon – Instant On	90 days
Recon	Never Expire

For more information about setting the data retention policy, see the Help for Configuration > Storage.