Data Retention

As of July 2020, the data retention policies for Sysdig Monitor and Sysdig Secure are as described below.

When a host or instance is no longer monitored (i.e. when an agent is uninstalled), the historical data continues to be retained for the stated times.

Note

If required, it is possible to change the standard data retention settings using Sysdig's REST API. A Sysdig support team or professional services member should assist, as there are a variety of storage and timeline implications to consider before making such a change.

See Subscription for details on the Essentials and Enterprise tiers.

Sysdig Monitor Retention Limits

Essentials

Enterprise

Metrics data

10s : 4 hours

1min : 1 week

10 min : 2 weeks

1 hr: 2 months

1 day: 15 months

same as Essentials

Events

Alert events: 30 days

Custom events: 14 days OR 10M (per customer)

same as Essentials

Sysdig Secure Retention Limits

Essentials

Enterprise

Policy events

1M events or 90 days

same as Essentials

Scan results

Last 3 unique tags and last 7 days

+ keep all running images

Last 5 unique tags and last 90 days

+ keep all running images

Activity audit

5 days

90 days

Benchmarks

30 days

90 days