Skip to content

Glossary: Logs and Data Sources for Investigations

Rotated logs

Also written: log rotation, auth.log.1, auth.log.2.gz

Older log lines moved into separate, often compressed, files such as auth.log.1 and auth.log.2.gz, and later deleted on a schedule. Search them too.

Where the book teaches it

Related terms

zgrepLegal holdRetention