I have 51 GB of HTTP (Apache) access logs for my website going back five years. I’m sort of a hoarder, as far as my personality, which is why I am reluctant to delete them, even though it’s taking up more disk space than I would like. Should I bite the bullet and delete? Or anonymize?
What do people do with their old log files?
The answer really depends on what you usually need to do with logs, what is your business and your (company?) security policy.
On my side, I usually never delete logs. They are really useful to spot security holes, behaviors, trends.
If storage is a problem, consider to use a storage service such as Amazon S3 and don’t forget to compress them! I usually move there all the gzipped logs older than one month.