Log analytics retention greater than 730 days

JUFO 61 Reputation points
2022-09-27T12:19:07.813+00:00

Hello,

We need to have a 10-year retention for the data we keep in log analytics.
We have seen that in preview it is retaining them for up to 7 years.
There is some standard way (or walkaround) to retain them for longer: 10, 20 years...

Thanks

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,800 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,686 questions
Accepted answer
  1. George Moise 2,346 Reputation points Microsoft Employee
    2022-09-27T13:03:20.147+00:00

    Hello @JULIOFORNIESGANCEDO-9216,

    In Log Analytics, you can only retain the data for a maximum 7 years period:

    • 2 years in the interactive retention (workspace retention)
    • 5 extra years in the archive retention

    If you need to keep the data more than that, you can make use of Data Export feature that will allow you to export data from specific / all tables to an Azure Storage / Azure Event Hub / etc. (from which you can pull that data in any storage solution).

    I hope this helps.
    BR,
    George

    0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vinodh247-1375 11,046 Reputation points
    2022-09-27T13:08:25.423+00:00

    Hi

    Thanks for reaching out to Microsoft Q&A.

    Not possible currently for more than 7 years, but you can try to export like George has pointed out. I think that is an adopted solution most of the companies follow for LTR of log analytics data.

    Please Upvote and Accept as answer if the reply was helpful, this will be helpful to other community members.

    0 comments
  2. Maxim Sergeev 6,566 Reputation points Microsoft Employee
    2022-09-27T16:38:40.52+00:00

    If you wanna have the same KQL magic in-place, have a look at Azure Data Explorer as an alternative archive option.

    It's cheaper and you can store your data as long as you want. Actually, this is a PaaS version of Log Analytics.
    https://learn.microsoft.com/en-us/azure/data-explorer/data-explorer-overview

    0 comments