I'm more surprised that they don't just ship logs to central log gathering directly instead of saving plain files then move them around