topic Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? in Endpoint https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/273152#M11331 <P><SPAN>SK and admin guide for more information:&nbsp;</SPAN></P><UL><LI><A title="Izvirni URL: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Logs-menu.htm?tocpath=_____24#Data_Storage_and_Retention. Kliknite ali tapnite, če zaupate tej povezavi." href="https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsc1.checkpoint.com%2Fdocuments%2FInfinity_Portal%2FWebAdminGuides%2FEN%2FHarmony-Endpoint-Admin-Guide%2FTopics-HEP%2FLogs-menu.htm%3Ftocpath%3D_____24%23Data_Storage_and_Retention&amp;data=05%7C02%7Cmitja%40s3next.com%7Cd9d487e74e854f7db32208de7e8ad93e%7C75fbf84c87864fb281bde9e834ff8196%7C0%7C0%7C639087332017572305%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;sdata=s12yBgjTHiWTye3arJOtQCW0zfmh5OoTwlciTDdZnVw%3D&amp;reserved=0" target="_blank" rel="noreferrer noopener">Harmony Endpoint Logs</A></LI><LI><A title="Izvirni URL: https://support.checkpoint.com/results/sk/sk182394. Kliknite ali tapnite, če zaupate tej povezavi." href="https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.checkpoint.com%2Fresults%2Fsk%2Fsk182394&amp;data=05%7C02%7Cmitja%40s3next.com%7Cd9d487e74e854f7db32208de7e8ad93e%7C75fbf84c87864fb281bde9e834ff8196%7C0%7C0%7C639087332017604537%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;sdata=one%2FdFmB%2BQHEGpmRZgoqF%2F%2BD9CKJJ5D%2FqDwavjhwPRc%3D&amp;reserved=0" target="_blank" rel="noreferrer noopener">sk182394 - Cloud Log Analytics &amp; Logging - Ingestion / Retention Solution</A></LI></UL><H3><SPAN>1.&nbsp;<STRONG>Audit Logs</STRONG></SPAN></H3><UL><LI><SPAN><STRONG>Retention Period:</STRONG>&nbsp;Audit logs in Infinity Portal are kept for a minimum of&nbsp;<STRONG>one year</STRONG>&nbsp;(12 months), regardless of license.</SPAN></LI><LI><SPAN><STRONG>Reference:</STRONG></SPAN><BLOCKQUOTE><P><SPAN>"Audit logs are kept on record for a minimum of one year."<BR />(Infinity Portal Administration Guide)</SPAN></P></BLOCKQUOTE></LI></UL><H3><SPAN>2.&nbsp;<STRONG>Operational/Event Logs (All Other Logs)</STRONG></SPAN></H3><UL><LI><SPAN><STRONG>Retention Period:</STRONG></SPAN><UL><LI><SPAN>The default and guaranteed retention period for&nbsp;<STRONG>operational/event logs</STRONG>&nbsp;(including security events, endpoint activity, etc.) is determined by your&nbsp;<STRONG>Harmony Endpoint license</STRONG>.</SPAN></LI><LI><SPAN>For most standard licenses, this period is&nbsp;<STRONG>90 days</STRONG>.</SPAN></LI></UL></LI><LI><SPAN><STRONG>What Happens After Retention Period?</STRONG></SPAN><UL><LI><SPAN>After the retention period (e.g., 90 days), logs are&nbsp;<STRONG>deleted</STRONG>&nbsp;and cannot be recovered from the Infinity Portal.</SPAN></LI><LI><SPAN>There is no official documentation confirming that operational/event logs are kept longer than the licensed retention period, even if you see some logs older than 90 days in the UI. This may be due to backend processing delays or exceptions, but&nbsp;<STRONG>you should not guarantee longer retention to customers</STRONG>.</SPAN></LI></UL></LI></UL><H3><SPAN>3.&nbsp;<STRONG>NIS2 Compliance (180 Days)</STRONG></SPAN></H3><UL><LI><SPAN><STRONG>Requirement:</STRONG>&nbsp;NIS2 requires&nbsp;<STRONG>all logs</STRONG>&nbsp;(not just audit) to be retained for at least 180 days.</SPAN></LI><LI><SPAN><STRONG>Check Point Guarantee:</STRONG></SPAN><UL><LI><SPAN>Unless you have a specific license or agreement for 180-day retention,&nbsp;<STRONG>Check Point only guarantees the retention period defined in your license</STRONG>&nbsp;(typically 90 days).</SPAN></LI><LI><SPAN>If you need to guarantee 180 days, you must:</SPAN><UL><LI><SPAN><STRONG>Upgrade your license</STRONG>&nbsp;to a plan that supports 180-day retention (if available).</SPAN></LI><LI><SPAN><STRONG>Export logs</STRONG>&nbsp;regularly to external storage (e.g., SIEM, Azure Storage, etc.) for long-term retention.</SPAN></LI></UL></LI></UL></LI></UL><H3><SPAN>4.&nbsp;<STRONG>Forwarding/Exporting Logs</STRONG></SPAN></H3><UL><LI><SPAN><STRONG>Infinity Portal</STRONG>&nbsp;allows forwarding logs to external storage (e.g., Azure Storage), but note:</SPAN><UL><LI><SPAN>The storage account retains data for only&nbsp;<STRONG>7 days</STRONG>&nbsp;by default (unless you configure longer retention on your storage solution).</SPAN></LI><LI><SPAN>You are responsible for managing retention in external systems.</SPAN></LI></UL></LI></UL><P><BR /><SPAN><STRONG>Check Point guarantees log retention for the period defined in your license. For most customers, this is 90 days for all operational/event logs and 1 year for audit logs. If you require 180-day retention for NIS2 compliance, you must either upgrade your license or regularly export your logs to an external system for long-term storage.</STRONG></SPAN><BR /><SPAN>&nbsp;</SPAN></P> Wed, 11 Mar 2026 15:25:35 GMT Mitja-S3NEXT 2026-03-11T15:25:35Z What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268753#M11218 <P>What is the default LOG retention period in a Harmony Endpoint Advanced license?</P><P>(LOG, not AUDIT LOG)</P> Tue, 27 Jan 2026 14:04:32 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268753#M11218 Mitja-S3NEXT 2026-01-27T14:04:32Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268761#M11219 <P>Im fairly sure its 90 days.</P> Tue, 27 Jan 2026 14:11:19 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268761#M11219 the_rock 2026-01-27T14:11:19Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268762#M11220 <P>No, thats surely not.<BR />I can see LOGs from 2023. But what I need to know is the exact limitation.</P> Tue, 27 Jan 2026 14:13:28 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268762#M11220 Mitja-S3NEXT 2026-01-27T14:13:28Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268763#M11221 <P>I was thinking of something else then. Lets see if someone can confirm for sure. Maybe if you check with Account services, they might be able to verify as well.</P> Tue, 27 Jan 2026 14:20:33 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268763#M11221 the_rock 2026-01-27T14:20:33Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268765#M11222 <P>That would be very nice.</P> Tue, 27 Jan 2026 14:27:59 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268765#M11222 Mitja-S3NEXT 2026-01-27T14:27:59Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268766#M11223 <P>Correct 90 days is default (for Cloud Managed) per:</P> <P><A href="https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Logs-menu.htm?Highlight=Logs" target="_blank" rel="noopener">https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Logs-menu.htm?Highlight=Logs</A></P> Tue, 27 Jan 2026 14:28:59 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268766#M11223 Chris_Atkinson 2026-01-27T14:28:59Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268767#M11224 <P>If I were you, would call Account services folks, just give them your UC account number and Im positive they will give you the right info. I always find them to be extremely helpful when I call.</P> Tue, 27 Jan 2026 14:30:28 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268767#M11224 the_rock 2026-01-27T14:30:28Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268770#M11225 <DIV class="">&nbsp;</DIV><P>Any idea, why I see LOGs from 2023, I attached a screenshot?<BR />Maybe I forgot to mention it is the CLOUD version of Endpoint.</P><P>&nbsp;</P> Tue, 27 Jan 2026 14:33:55 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268770#M11225 Mitja-S3NEXT 2026-01-27T14:33:55Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268874#M11230 <P>Do you have any of the retention license extensions in place per:&nbsp;<A href="https://support.checkpoint.com/results/sk/sk182394" target="_self">sk182394</A>&nbsp;?</P> Tue, 27 Jan 2026 23:48:35 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268874#M11230 Chris_Atkinson 2026-01-27T23:48:35Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268904#M11232 <P>No, everything is default, the license is Harmony Endpoint Advanced,</P> Wed, 28 Jan 2026 07:08:22 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/268904#M11232 Mitja-S3NEXT 2026-01-28T07:08:22Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269116#M11237 <P>I would check with TAC on this, honestly.&nbsp;</P> Thu, 29 Jan 2026 19:43:18 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269116#M11237 PhoneBoy 2026-01-29T19:43:18Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269314#M11238 <P>Hey mate,</P> <P>Were you able to find the answer to this?</P> Sat, 31 Jan 2026 00:14:04 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269314#M11238 the_rock 2026-01-31T00:14:04Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269479#M11239 <P>Unfortunately not.</P> Mon, 02 Feb 2026 18:54:07 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269479#M11239 Mitja-S3NEXT 2026-02-02T18:54:07Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269480#M11240 <P>Did you open Account services case?</P> Mon, 02 Feb 2026 18:55:13 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269480#M11240 the_rock 2026-02-02T18:55:13Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269481#M11241 <P>It is a sales related technical question.&nbsp;</P> Mon, 02 Feb 2026 18:56:56 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269481#M11241 Mitja-S3NEXT 2026-02-02T18:56:56Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269482#M11242 <P>I would still see if Account services would know, if not, they can refere you to your SE.</P> Mon, 02 Feb 2026 19:06:45 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269482#M11242 the_rock 2026-02-02T19:06:45Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269520#M11243 <P>I opened now a TAC, i will keep this post updated.</P> Tue, 03 Feb 2026 07:08:39 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269520#M11243 Mitja-S3NEXT 2026-02-03T07:08:39Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269553#M11244 <P>Please keep us posted.</P> Tue, 03 Feb 2026 11:53:06 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269553#M11244 the_rock 2026-02-03T11:53:06Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269672#M11245 <P>This is the TAC response:</P><P>----------------------------------------------------------------------</P><P>Thank you for contacting Check Point Account Services.</P><P>Please note that while Account Services is happy to assist with any licensing and/or User Center related issues, we are a post-sales team only and therefore do not handle sale related issues.</P><P>&nbsp;</P> Wed, 04 Feb 2026 14:45:12 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269672#M11245 Mitja-S3NEXT 2026-02-04T14:45:12Z Re: What is the default LOG retention period in a Harmony Endpoint Advanced license? https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269675#M11246 <P>K, so then I suppose only other logical option would be your local SE.</P> Wed, 04 Feb 2026 14:47:03 GMT https://community.checkpoint.com/t5/Endpoint/What-is-the-default-LOG-retention-period-in-a-Harmony-Endpoint/m-p/269675#M11246 the_rock 2026-02-04T14:47:03Z