Retention
How long data — especially logs — is kept before being archived or destroyed.
Retention sets how long data — especially logs — is kept before archiving or destruction, and it cuts both ways: too short and you can’t investigate a months-old breach; too long and you carry legal liability and storage cost. Drive it by legal, regulatory, and investigation needs, and tier storage accordingly — hot storage for searchable recent logs, cheaper cold storage for long-term archives.