Cisco Security Analytics and Logging Logging and Troubleshooting Cloud - Term License (90 days - 2 years) - 1 GB per day

The Logging and Troubleshooting License provides log storage and enables drill-down using advanced search and filter capabilities in an event viewer, and is available for both SAL (SaaS) and SAL (On prem) offerings. Cloud storage in SAL (SaaS) entitles the user to 90 days of rolling retention based on ingest rate, whereas on-premises log retention is a function of logging rate and storage space available on the appliances. The SaaS license presents its outcomes in CDO through the "Event Logging" tab nested under the "Monitoring" menu, whereas the on-premises license supports remote query by the FMC, and provides an aggregated viewer in the SNA Manager under the Dashboard tab.