Data Retention in your Chronicle account

By default, Google retains twelve months of your data in your Chronicle account. This retention period can be extended as part of your Purchase Order. The retention period applies to all of the data in your Chronicle instance. For example, you can't modify the data retention policy for a specific log type.

Google uses an automated system to remove historical data based on event and detection timestamps.

For more information, see Chronicle Security Operations pricing.