I see this a lot indeed. Focussing on log retention times instead of focussing om getting the correct metrics and logs in there.