Glossary: Logs and Data Sources for Investigations
Rotated logs
Also written: log rotation, auth.log.1, auth.log.2.gz
Older log lines moved into separate, often compressed, files such as auth.log.1 and auth.log.2.gz, and later deleted on a schedule. Search them too.