How Your License Affects Data Storage Policies

You can divide data into storage groups, which enables you to partition the incoming events data and provide different retention periods, based on the query filter. To preserve space in the database and improve data retrieval from storage groups, you can configure the database to remove events older than a certain number of months. Your product license affects the maximum value that you set for the data retention policy. If you have deployed multiple capabilities in the ArcSight Platform, the term or permanent license with the highest maximum retention value takes precedence over the maximum allowed value of other licenses. For example, a Recon term or permanent license provides the longest retention time.

Product License	Maximum retention value
Intelligence	30 days
Recon – Instant On	90 days
Recon	Never Expire

For more information about setting the data retention policy, see the Help for Configuration > Storage.