Increase syslog and Tracking Center retention from 7 days to 31 days
nano /etc/logrotate.d/rsyslog /var/log/syslog { rotate 31 daily missingok notifempty delaycompress compress postrotate /usr/lib/rsyslog/rsyslog-rotate endscript }
systemctl restart rsyslog.service
In case of a cluster, you have to do this on each node. Log is not synced over nodes. To have complete Tracking Center on master and slave only for backup, set master node to lower mx value.