Microsoft Sentinel
Cloud and workloadsConfigure Interactive and Long-term Data Retention in Microsoft Sentinel
In brief
The article updates its title and metadata, links the UEBA reference to the deployment guide, and reformats the post-deployment next-step link.
What Defender admins need to know
Administrators can follow the deployment and post-deployment guidance more easily. No action is required.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
title: Configure interactiveInteractive and long-Long-term data retentionData Retention in Microsoft Sentinel
description: Towards the end of your deployment procedure, you set up data retention to suit your organization's needs.
ms.author: edbaynash
author: EdB-MSFT
ms.reviewer: krishsa
ms.topic: how-to
ms.date: 07/21/202401/2026
ai-usage: ai-assisted
ms.custom: msecd-doc-authoring-1016
#Customer intent: As a security architect or SOC manager, I want to configure data retention and archiving policies so that I can ensure long-term storage of important data at a reduced cost.
Configure interactive and long-term data retention in Microsoft Sentinel
In the previousEnable UEBA step of the deployment step,guide, you enabled the User and Entity Behavior Analytics (UEBA) feature to streamline your analysis process. In this article, you learn how to set up interactive and long-term data retention, to make sure your organization retains the data that's important in the long term. This article is part of the Deployment guide for Microsoft Sentinel.
Configure data retention
- Configure interactive and long-term data retention for one or more tables (one table at a time)
- Configure data retention for multiple tables at once
Next stepsstep
In this article, you learned how to set up interactive and long-term data retention.
[!div class="nextstepaction"]
Perform post-deployment steps\ No newline at end of file Perform post-deployment steps \ No newline at end of file
@@ -1,11 +1,13 @@ ----title: Configure interactive and long-term data retention in Microsoft Sentinel+title: Configure Interactive and Long-term Data Retention in Microsoft Sentinel description: Towards the end of your deployment procedure, you set up data retention to suit your organization's needs. ms.author: edbaynash author: EdB-MSFT ms.reviewer: krishsa ms.topic: how-to-ms.date: 07/21/2024+ms.date: 07/01/2026+ai-usage: ai-assisted+ms.custom: msecd-doc-authoring-1016 #Customer intent: As a security architect or SOC manager, I want to configure data retention and archiving policies so that I can ensure long-term storage of important data at a reduced cost.@@ -14,7 +16,7 @@ ms.date: 07/21/2024 # Configure interactive and long-term data retention in Microsoft Sentinel -In the previous deployment step, you enabled the User and Entity Behavior Analytics (UEBA) feature to streamline your analysis process. In this article, you learn how to set up interactive and long-term data retention, to make sure your organization retains the data that's important in the long term. This article is part of the [Deployment guide for Microsoft Sentinel](deploy-overview.md).+In the [Enable UEBA](enable-entity-behavior-analytics.md) step of the deployment guide, you enabled the User and Entity Behavior Analytics (UEBA) feature to streamline your analysis process. In this article, you learn how to set up interactive and long-term data retention, to make sure your organization retains the data that's important in the long term. This article is part of the [Deployment guide for Microsoft Sentinel](deploy-overview.md). ## Configure data retention @@ -23,9 +25,7 @@ Retention policies define when to remove data, or mark it for long-term retentio - [Configure interactive and long-term data retention for one or more tables](/azure/azure-monitor/logs/data-retention-configure) (one table at a time) - [Configure data retention for multiple tables](https://github.com/Azure/Azure-Sentinel/tree/master/Tools/Archive-Log-Tool) at once -## Next steps--In this article, you learned how to set up interactive and long-term data retention.+## Next step > [!div class="nextstepaction"]->>[Perform post-deployment steps](review-fine-tune-overview.md)\ No newline at end of file+> [Perform post-deployment steps](review-fine-tune-overview.md)\ No newline at end of file