Deep Discovery Analyzer can retain the investigation package data for up to 100 days, but the time can be reduced due to storage limitations.
To ensure the availability of the investigation package data, Trend Micro recommends backing up the data to an external server. For details, see Data Backup.
The following examples illustrate how storage limitations can affect the amount of time that the investigation package data is retained in Deep Discovery Analyzer.
Based on testing done by Trend Micro, the average size of the investigation package data is 8 MB. If Deep Discovery Analyzer analyzes 8000 samples per day, then the resulting investigation package data is 64000 MB.
If Deep Discovery Analyzer is in cluster mode, the disk space occupied per day is multiplied by the number of appliances in the cluster.