How long is Cato SASE access log retention period?

It has been half a year since the logs that can be checked in Events on the GUI are output.
Logs saved by Log exporter are for the past 7 days, so you need to run the script every day and download the logs locally. It is possible to manage data for more than half a year by importing data from an external SIEM such as Splunk via API. The support site has sample scripts for the API.

Click here for individual consultation