Delete logs more flexibly

It would be nice to clear logs flexibly rather than all-or-nothing.  Perhaps I'd like to keep the last week, but delete the rest.  This is especially useful after config changes where the old logs are less "applicable".  I do like the idea that this perhaps requires deleting the oldest logs first, but if there was a way to chunk off months or weeks it would be awesome so I don't have GB's of log data that are less ideal.  This maybe should be a role-based or MFA-required configuration too to ensure a hacker doesn't access my tenant and delete their footprints.