InsightIDR does not ingest or analyze historical data from event sources. Your data populates various pages, dashboards, widgets, and key performance indicators (KPIs) after events are processed. All 13 months of retained data stored by default is now available in Log Search.Īfter you configure your core event sources, the Collector automatically begins to normalize and analyze data as it is ingested. You no longer need to import logs from cold storage.
Data retention policy and log storage policy changes as of Feb 2, 2022
