Cold Storage Logs
Cold storage archives logs that are older than your hot storage entitlement. If you search for log data stored beyond your plan’s hot data retention period, you can still import it from cold storage. The log data for the selected time frame and log selection will be automatically reimported into InsightIDR and available for search.
Note: Data retention periods will vary based on your plan.
Import Logs from Cold Storage before you change your data retention plan
If you are increasing your Hot Storage data retention and want to move your Cold Storage data to your new Hot Retention plan, you must import your data from Cold Storage before you change your retention plan. If you increase your plan first, you may need to contact Rapid7 Support for assistance with importing your data from cold storage.
Import Logs from Cold Storage
When you attempt to search for log data outside of your data retention period, you will be prompted to import logs from cold storage.
To import logs from cold storage:
- Go to the log search and search beyond your data retention period. A notification message appears and alerts you that you’ve searched beyond your data retention period.
- Click the Import logs from cold storage button to start your import.
- When the Name Your Cold Import window appears, enter a name for the import. Save your changes.
A notification message appears and alerts you that the import process has begun. When the import completes, you will be able to access and search the imported data from the Import and Export Archive from the left menu.
View Imported Cold Storage Logs
All imported cold storage logs are available from the Import and Export Archive. Go to the left menu and choose Import and Export Archive. When the archive appears, go to the Cold Storage Logs tab.
From the Cold Storage Logs list, you can see all the logs that have been reimported into InsightIDR, their statuses, and the time range they cover.