Latest Content

How to Update the Retention Period of an Audit Logs Subscription

Updated on 29 July, 2026

Update the label or retention period of an existing audit logs subscription for a Vultr organization using the Vultr API, without recreating the subscription.

Updating an audit logs subscription changes its label or retention period without recreating the subscription. Because an account can have only one subscription, this is the only way to adjust retention after initial setup.

This guide explains how to update an audit logs subscription using the Vultr Console or the Vultr API.

  • Vultr Console
  • Vultr API

  1. Log in to the Vultr Console.

  2. Click the organization name in the top navigation bar.

  3. Click Manage Organization.

  4. Click Audit Logs under the Logs section.

  5. Click the edit icon next to the subscription summary.

  6. In the Audit Log Subscription panel, under Retention Period, select a preset (3 months, 6 months, 1 year, 2 years, 5 years, or 10 years), or select Custom and enter a value in Custom Retention Period (days).

    The Audit Log Subscription Cost Estimation section updates to show the ingestion and retention cost for the new period.

  7. Click Change Subscription.

  1. Send a GET request to the List Audit Logs Subscriptions endpoint to find the id of your subscription.

    console 
    $ curl "https://api.vultr.com/v2/logs/audit-logs" \
    -X GET \
    -H "Authorization: Bearer ${VULTR_API_KEY}"

    Note the subscription's id for the next step.

  2. Send a PUT request to the Update Audit Logs Subscription endpoint to increase the retention period. Replace {subscription-id} with the id from the previous step, SUBSCRIPTION-LABEL with a new label, and EXPIRATION-DAYS with the new retention period in days (up to 3,653 days, or 10 years).

    console 
    $ curl "https://api.vultr.com/v2/logs/audit-logs/{subscription-id}" \
    -X PUT \
    -H "Authorization: Bearer ${VULTR_API_KEY}" \
    -H "Content-Type: application/json" \
    --data '{
        "label": "SUBSCRIPTION-LABEL",
        "expiration_days": EXPIRATION-DAYS
    }'

    A successful request returns an HTTP 200 OK response with the updated subscription details.

Note
Both methods only increase the retention period. Audit log data is immutable, so neither the subscription nor its retention period can be shortened through the API or the Vultr Console. To reduce the retention period or delete the subscription, contact Vultr Support.

Comments