@sadserver just jumping into this as well. Here are a couple of questions to add to @nicole :

* Are you running single node Loki?
* Is it just the default labels from Promtail? If so how many hosts are you monitoring
* is it only at 30 days the query starts to run slow?

Queries running slow is a hard one but hopefully, we can point you in the right direction. It might be a query change or we might need to scale Loki out a little.