Issue of storing events in Kaspersky Endpoint Security Cloud workspaces
Events in Kaspersky Endpoint Security Cloud, that must be stored for 30 days, are sometimes removed prematurely.
The issue is caused by the server part of Kaspersky Endpoint Security Cloud. Older events are prematurely deleted when the system is at its peak load.
We are working on fixing this issue. Several changes to the user interface and internal systems are going to be introduced in the near future.
If you need to process a larger number of events before the issue is fixed, use the report delivery feature to generate and send reports to a specified email address by schedule. For instructions, see Online Help.