By default, Darwinium is configured to index the data stored on your S3 bucket for 12 months. After this time, events will not be visible/searchable in the forensics investigation UI.
As the custodian of event data you may wish to delete old records to reduce costs. It is advisable to configure the lifecycle configuration rules that are to be applied to the objects in your bucket. If the customer policies mandate object versioning to be enabled in their S3 buckets, then it may be noted that the auto expiry of rule needs to be set on the versioned objects as well (as opposed to just the latest version of the objects). Not setting the lifecyle rule would mean that the S3 bucket sizes are not curtailed as time progresses by.
If a lifecyle rule is being configured for the S3 object, it is mandatory that the number of days for object expiry needs to be set to at-least 366 days.
The following links might help in configuring the lifecycle rules of an S3 bucket.