Maybe logrotate rotating apache logs at midnight?

Unfortunately I don't have an OES 2018 SP3 at hand, the default entries in the crontab are for OES 24.2:

crontab -l for root
*/30 * * * * /usr/sbin/logrotate /etc/logrotate.d/oes-dashboard-agent > /dev/null 2>&1
*/30 * * * * /usr/sbin/logrotate /etc/logrotate.d/oes-core-agent > /dev/null 2>&1
*/30 * * * * /usr/sbin/logrotate /etc/logrotate.d/oes-telemetry-agent > /dev/null 2>&1
*/30 * * * * /usr/sbin/logrotate /etc/logrotate.d/oes-telemetry-server > /dev/null 2>&1
0 0 15 * * /opt/novell/proxymgmt/bin/change_proxy_pwd.sh -A yes
*/30 * * * * /usr/sbin/logrotate /etc/logrotate.d/oes-cis-agent > /dev/null 2>&1
*/30 * * * *  /usr/sbin/logrotate /etc/logrotate.d/oes-cis-scanner > /dev/null 2>&1
*/30 * * * * /usr/sbin/logrotate /etc/logrotate.d/oes-cis-recall-agent > /dev/null 2>&1

no entrys for other users

What do you see in the crontab of the systems on which the observation was made?

what says for user in $(cut -f1 -d: /etc/passwd); do echo $user; crontab -u $user -l; on the above systems?

Good morning, 

That actually makes sense, that it could be simply a rotation of the log, I didn't actually think about that. Yes it is at or around midnight each night. 

Good morning, 

There are matching entries on the OES 2018SP3 servers, none look they relate to  Apache, but that prior message above seems to be a good explanation as well,  they do basic checks for eDirectory process, along with trustee assignments and a space report nothing that appears to relate to Apache 

But again I appreciate your providing another place for me to look. 

/etc/logrotate.d/apache2

so it is a part of the normal log rotate process, and if you have enough activity that they need to rotate every day, then there is you answer.