Data resolution and retention
Event data resolution
To allow for more efficient troubleshooting, metrics in operational data are available with high resolution, either 5-minute or 15-minute, and low resolution, 1-day.
To access high-resolution data, you must use a timeframe expressed in minutes or hours in the during past
clause.
devices during past 24h
| include session.events during past 24h
| compute total_user_interaction = user_interaction_time.sum()
| where total_user_interaction > 8h
| list device.name, total_user_interaction
To access data in low-resolution, you must use a timeframe expressed in days in the during past
clause.
devices during past 30d
| include session.events during past 30d
| compute total_user_interaction = user_interaction_time.sum()
| where total_user_interaction > 10d
| list device.name, total_user_interaction
Contrary to metrics in operational data, trend data metrics are available only with low resolution, either 1-day or 7-days.
Retention per data category
Data retention refers to the period of time for which the specific set of data is stored and accessible through dashboards and investigations. The following table summarizes the general rules of retention per data category. The retention periods represent the default platform settings. You can customize them on the Data management (GDPR) page.
Data categories | Retention | Examples | |
---|---|---|---|
Objects | Inventory objects | 30 days from the time of the object’s last activity |
|
Configuration objects | Indefinite, until deleted by a Nexthink account |
| |
Events | Operational data | 30 days from the time of the event Exception:
|
|
Trend data | Ranging from 90 days to 13 months, depending on the use case
Exception: Campaigns data ( |
Web applications and DEX trends are not available in NQL, they are only available in the related module dashboards. |
Data availability in modules
Product modules allow you to access the object and event data described above. The available data value indicates how far back in the past you can retrieve the data for a given module.
Module | Available data |
Digital Experience | 395 days |
Alerts overview | 30 days |
Diagnostic view | 14 days |
Device View | 30 days* |
Applications - web applications | 30 days - operational data 90 days - trend data |
Applications - desktop applications | 14 days |
Live Dashboards | 30 days - operational data 395 days - trend data |
Remote Actions | 30 days - operational data 395 days - trend data |
Campaigns | 10 years |
Software Metering | 90 days |
Workflows | 30 days |
* The number of hours displayed on the page depends on your screen resolution.
RELATED TOPIC