Adjust your event log file data retention period and download up to 1 year of event log file data in case of a security incident.
Where: This change applies to Lightning Experience and Salesforce Classic (not available in all orgs) in Enterprise, Performance, and Unlimited editions where Event Monitoring is enabled.
Who: This change is available to customers who purchased Salesforce Shield or Salesforce Event Monitoring add-on subscriptions.
How: From Setup, in the Quick Find box, enter Event Monitoring Settings and then select Event Monitoring Settings. Enable the Retain event log files setting. Then, to specify the number of days to retain your data, use the eventLogRetentionDuration field on the EventSettings Metadata API type.