While many teams keep only a week of data, having 15 months of retention is ideal for year-over-year performance comparisons. This allows you to analyze seasonal traffic peaks and conduct long-term forensic security investigations when needed.