Retain unsampled logs for at least 15 months to identify regional performance drift and seasonal traffic shifts. Short retention windows often hide low-frequency signals, such as the 0.1% of requests affected by BGP path inflation, which are critical for proving that architectural changes actually improved long-term performance.