Helix data is retained for a specific time period. After the specified time passes, the data is deleted from Helix.
Your data retention time periods depend on your Helix subscription. Contact your Trellix account team to obtain your retention times for the following:
Index (Quick) search
Archive search
Cold storage (long-term retention)
Third-party ingestion