> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cyberup24.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Storage

The appliance stores data locally using two complementary systems, one for large unstructured files and one for structured, queryable data.

<Columns cols={2}>
  <Card title="Object storage (MinIO)" icon="box-archive">
    Holds large, unstructured objects such as packet capture files and extracted files. This is the repository for the appliance's raw data.
  </Card>

  <Card title="Structured storage (ClickHouse)" icon="table">
    Holds indexed logs and telemetry and supports fast querying, allowing analysis tools to work through large datasets efficiently.
  </Card>
</Columns>

## Retention and overwrite behavior

The appliance retains data only until its onboard storage reaches capacity. Once storage is full, the appliance automatically begins overwriting the oldest data to accommodate new data. This sustains continuous capture and logging, prioritizing ongoing collection over indefinite retention.

<Warning>
  Because the oldest data is overwritten once storage is full, any data to be retained must be offloaded before it is overwritten. Data left on the appliance is not permanent. The data offloading page describes how data is moved off the appliance.
</Warning>

<Tip>
  Storage usage should be monitored so that important data is offloaded before it is overwritten. System status, including storage usage, is covered in the administration section.
</Tip>