If you send your alert data to the Jamf Protect Cloud, you can configure data retention settings for your organization.
Data retention settings allow you to configure the following:
The number of days alerts are accessible in the Jamf Protect web app
The number of days data in the Jamf Protect Cloud (alert, unified logs, and telemetry data) are archived and encrypted in a Jamf-managed Amazon S3 bucket.
Keep the following in mind when configuring data retention settings:
By default, alerts are simultaneously accessible in-app and securely archived in a Jamf-managed Amazon S3 bucket for 365 days, unless the alert databases exceed 2 million entries.
Jamf Protect data is stored separately from other Jamf data, such as Jamf Pro data.
Data retention settings can only be changed once every 24 hours.
Alerts have a total retention of 2 million entries for Low, Medium, and High severity alerts and 2 million for Informational severity alerts.
- If alerts exceed 2 million entries, the oldest alert entries will be continuously removed to keep both alert entries at 2 million or fewer.Note:
Alert data is always stored for at least 24 hours, even if a single day of alert data exceeds 2 million entries.