You need high-fidelity log data and enough historical context for the models to understand your patterns. If you only keep a few days of logs, the AI will not have enough information to distinguish between a rare but normal event and a genuine anomaly.