Netskope Advanced Analytics supports retention periods from 7 days up to 13 months. In addition, Netskope offers storage-based entitlement and UI consumption for customers with Advanced Analytics. Based on the displayed storage consumption, you can have insights of your data volume for different events and avoid overages. Note, additional licensing may be required.
The base license has 7 days (+3 day grace period) of data. It can be extended to 3, 6, or 13 months per license upgrade. After enabling Advanced Analytics, your tenant is preloaded with data from the last 7 or 90 days (based on the license). For 6 or 13 month licenses the data lake will grow over time.
To view your current retention settings, navigate to Advanced Analytics > Explore > Data Retention. The image below shows storage based retention with all licensing options enabled.
Each retention period includes a grace period to run reports.
The following table lists the retention and extension periods.
| Data Collection | Skope IT3 | Reports | Extended Data Retention (Skope IT and Reports) | Netskope Advanced Analytics2 |
|---|---|---|---|---|
| Application Events | 90 | 90 | 3651 | 7 days to 13 months |
| Page Events | 90 | 90 | 3651 | 7 days to 13 months |
| Network Events for Private Access | 30 | 30 | 30 | 7 days to 13 months |
| Network Events for Cloud Firewall | 30 | 30 | 30 | 7 days to 13 months |
| Alerts | 90 | 90 | 3651 | 7 days to 13 months |
| Endpoint Events | 90 | N/A | 3651 | 7 days to 13 months |
| Audit Logs3 | 90 | N/A | 3651 | N/A |
| DLP Incidents3 | 90 | N/A | 3651 | 7 days to 13 months |
| Transaction Events | 30 | N/A | N/A | 7 days to 13 months |
| Device (Client Event Data) | N/A | N/A | N/A | 7 days to 13 months |
| SSPM4 | N/A | N/A | N/A | Latest Scan Results |
| DSPM | N/A | N/A | N/A | N/A |
| 1 :: Netskope Standard Reporting Extended Data Retention extends data retention in accounts from 90 days to 1 year to allow you to run queries on a larger data set. Netskope does not offer CFW, NPA, and Transaction Event Logs extended storage in Skope IT / Reports. Best practice is to purchase transaction events streaming service to stream the logs to the storage of your choice. | ||||
| 2 :: Netskope Advanced Analytics storage is based on data usage and supports data collections listed in the Netskope Advanced Analytics column. | ||||
| 3 :: DLP Incidents is visible in the 'Incidents' section of the Admin UI. Audit logs can be found in the Admin settings page. Extended data retention for these two data collections are also available. | ||||
| 4 :: 'SSPM Evaluation Results' shows the latest scan results based on query run date or dashboard load. | ||||
To learn more: Data Retention