Glossary: Security Monitoring and Automation
retention policy
Also written: retention
A rule for how long logs are kept, set by laws and company rules. Log aggregation makes one policy possible for all machines.
Where the book teaches it
Related terms
log aggregationSIEM (security information and event management)