Public search query: log retention policy that survives an audit