Skip to content

Commit 978009f

Browse files
committed
Incorp fb part 1
1 parent b6cf925 commit 978009f

File tree

2 files changed

+5
-2
lines changed

2 files changed

+5
-2
lines changed

articles/sentinel/configure-data-retention.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: cwatson-cat
55
ms.author: cwatson
66
ms.service: microsoft-sentinel
77
ms.topic: tutorial
8-
ms.date: 09/23/2022
8+
ms.date: 10/03/2022
99
ms.custom: template-tutorial
1010
#Customer intent: As an Azure account administrator, I want to archive older but less used data to save retention costs.
1111
---
@@ -37,7 +37,8 @@ To complete the steps in this tutorial, you must have the following resources an
3737
- Log Analytics workspace.
3838

3939
## Set the retention policy for a table
40-
<!-- Introduction paragraph -->
40+
41+
In your Log Analytics workspace, set the number of days for the interactive retention so . Then, change the total retention policy for a table like **SecurityEvents** to archive 30 days of data.
4142

4243
1. Sign in to the [Azure portal](https://portal.azure.com).
4344
1. In the Azure portal, search for and open **Log Analytics workspaces**.
@@ -54,6 +55,8 @@ To complete the steps in this tutorial, you must have the following resources an
5455
|Interactive retention | 30 days |
5556
|Total retention period | 60 days |
5657

58+
:::image type="content" source="media/configure-data-retention/data-retention-settings.png" alt-text="Screenshot of the data retention settings that shows the changes to the fields under the data retention section.":::
59+
5760
1. Select **Save**.
5861

5962

64.8 KB
Loading

0 commit comments

Comments
 (0)