Classic log storage

 

This view allows users of the classic log storage method to view the storage status of Enriched Logs ingested by , which are maintained in Hot, Warm, and Cold storage tiers for cost efficiency.

Enriched Logs are stored in Forescout Cloud for up to 365 Days. Forescout Cloud users with an Admin account role can restore logs from Cold Storage.

• Hot Storage: Enriched Logs are stored and immediately available to search and review for at least seven days.
• Warm Storage: Enriched Logs are stored and immediately available to search and review for at least 31 days.
• Cold Storage: Enriched Logs are not available for search or review without first bringing the log data for the data in question into Warm Storage. To do this, click a blue date and confirm.

Once the restore process is initiated, logs are available to search for up to seven days. The restore process takes anywhere from a few minutes to a few hours, depending on the size of the logs in the index being restored. Once the restore process is complete, the days restored from Cold storage will be filled yellow with vertical white lines.