If the organization you are trying to assess has 1-year telemetry retention enabled, you could use the stats API to see the number of events retained:
You will want to check the sensor_events
and sensor_retained
values.
If the organization you are trying to assess has 1-year telemetry retention enabled, you could use the stats API to see the number of events retained:
You will want to check the sensor_events
and sensor_retained
values.