<b>Don't lose the evidence: log rotation and retention sources</b>

<b>Don't lose the evidence: log rotation and retention sources</b>
The best log analysis fails if logrotate ate last month's data first.

🔗 <b>logrotate man page</b> — <code>rotate</code>, <code>compress</code>, <code>dateext</code>. Set <code>dateext</code> so files are <code>access.log-20240115</code> not <code>.1</code>, <code>.2</code> — far easier to script against.
🔗 <b>DigitalOcean's logrotate tutorial</b> — the cleanest walkthrough of a custom config and testing with <code>logrotate -d</code> (debug, no changes).
★ <b>Pick of the week — Will Critchlow on keeping 90+ days of logs for SEO</b> — argues crawl patterns only reveal themselves over months; default 7-day retention blinds you to seasonal bot behavior.
🔗 <b>GoAccess persistence docs</b> — incremental processing so you keep aggregates even after raw logs rotate away.

Takeaway: enable <code>dateext</code>, keep 90 days compressed, and aggregate before deletion.