Capture Client - Data retention policy
Description
The Capture Client Management Console is a cloud-based application that is used to manage endpoint security via the SonicWall Capture Client, in partnership with SentinelOne via their cloud-based Singularity Management Console.
As part of delivering this capability, both the Capture Client Management Console as well as the Singularity platform collect and store logs and data about threats detected, alerts and administrator operations. Stored data residence is dependent on the region selected when provisioning a tenant – for tenants provisioned in the North America region, it is stored within the United States; for tenants provisioned in the EMEA region, it is stored within Germany.
Below table provides the storage location and retention period by type of data. Please note that data stored on the SentinelOne Management Console can be viewed and exported via the Capture Client Management Console.
| Type of Data | Storage Location | Retention Period |
| Alerts | Capture Client Management Console | 30days |
| Management Logs | Capture Client Management Console | 30days |
| Device Logs | Capture Client Management Console | 30days |
| Web Content Filtering Events | Capture Client Management Console | 180days |
| Threats* | SentinelOne Management Console | 1 Year |
| Blocked Device Events* | SentinelOne Management Console | 1 Year |
| Activities* | SentinelOne Management Console | 1 Year |
| Agents with Threats* | SentinelOne Management Console | 1 Year |
| Agents without Threats* | SentinelOne Management Console | 3 Months |
| Firewall Control Events* | SentinelOne Management Console | 1 Month |
| Applications* | SentinelOne Management Console | 7 Days |
| Users* | SentinelOne Management Console | 7 Days |
| Deep Visibility Data | SentinelOne Management Console | 14 Days |
* For this data, the retention period is defined by SentinelOne
If Administrators would like to retain any of this data for longer periods, they can export it from the Capture Client Management Console. Refer to this KB article for example on how to export Management Logs.
Related Articles
Categories
not finding your answers?