Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
2054
Views
5
Helpful
1
Replies

Cisco AMP Dashboard overview

JupiterJazz007
Level 1
Level 1

‎12-31-2019 10:20 AM - edited ‎02-20-2020 09:11 PM

The overview page on the dashboard. Is 30 days the furthest the data goes?

I would love to see all the threats detected for the whole year. 

Labels:
0 Helpful
1 Reply 1

Matthew Franks
Cisco Employee
Cisco Employee

‎12-31-2019 01:37 PM

AMP stores 30 days of events on the dashboard for visibility.  Anything older than that is purged from the database to prevent overwhelming amounts of data storage across all customers.  If you would like to save data longer than that, we suggest using the API Event Stream in conjunction with a SIEM.  

 

Thanks,

Matt

Customers Also Viewed These Support Documents