You can use the NAC notification engine to generate notification to export to a separate system that can then archive and retain as long as you like. As an example, you can export everything as syslog to a syslog server, or a system like Splunk, that you can then search and run statistics on.