Log retention is in lower amount of days as requested.
Aria Operations for Logs
Too much log data is being ingested by the Aria Operations for Logs cluster to allow it to fulfill the retention policy, more storage or log filtering is required.
To increase live log retention time:
Note: Log Filtering only applies to future logs, not to logs already present in storage.