Retention requirements vary by use case: operations teams might need weeks or months, security teams often need a year or more, and compliance requirements can mandate multi-year retention. Modern compression techniques make longer retention much more affordable than traditional approaches.