This depends on the type of data:
- Windows query logs (local DNS logs) - we keep them for about 12 hours, then they are overwritten.
- Normal DNS queries - we keep for 3 days.
- Blocked queries - we keep forever.
- The monitored/eval list we currently keep for 21 days. May increase in the future.