Increase in syslog retention periodIssue The Syslog and sys_audit tables can be retained. Sometimes it is the customer's requirement to retain the logs for a longer duration due to some legal compliance and to support their auditing process. Here come the questions for how long it can be retained. Can it be retained forever? Will it have any impact on instance performance in future?ResolutionWe don't recommend increasing the Syslog retention for a very long period (like in years), the Syslog are debugged logs, but sys_audit can be retained forever. The increasing retention period in the Syslog table will impact all platforms and it would lead to an outage in a matter of time. Data insertion in the table will become slower with time. Instead, We suggest that logs can be exported at regular intervals to an external recipient (third party). Localhost logs can even be downloaded as suggested below URL:https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0826291 This way the data can be retained for a period as long as you want and also it will keep the platform stable.Especially for audit purposes, The Now Platform tracks inserts and updates to audited records in the Sys Audit (sys_audit) and Audit Relationship Change (sys_audit_relation) tables. You can find the official document on the below URL which confirms that the sys_audit table retains the data forever.Differences Between Audit and History Sets