On my Linux box I use the last command to check to make sure no one has logged on. I noticed that the log was cleared on the first of the month and found out that it is reset based on parameters in this config file... /etc/logrotate.conf