How long should I keep server logs for click fraud analysis?

Long enough to cover the gap between when the spend goes wrong and when you notice, which is usually weeks rather than days. Many hosting setups rotate logs on a short cycle, so the relevant period is already gone by the time anyone investigates. Extending retention is cheap and there is no way to recover a window you did not keep. Check the schedule now, not later.