CB Response Cloud: How Long are Events Stored on a CB-Hosted S3 Bucket?

[#1]

Environment

• CB Response Cloud: All Versions
• Hosted AWS S3 Bucket: All Versions

Question

How long are events stored on an AWS S3 bucket hosted by Carbon Black?

Answer

A Carbon Black-hosted AWS S3 bucket is able to retain events up to 7 days.

Additional Notes

• Once events pass 7 days of retention they are purged according to the oldest event.
• As of 7/12/2020 VMware Carbon Black no longer provides an S3 Bucket for new setups Carbon Black Hosted EDR - Event Forwarder UI Enablement Announcement

Related Content

• CB Response Cloud: What are the Supported Vendors for the CB Event Forwarder Connector?
• Integrating AWS Splunk to Cb Cloud Response gets error "No option found for S3 bucket"