Hi,
alternatively, to have logs inside pfSense with a rotation can be done as below (Method I had used long ago with pfSense 2.2.x):
a) install the Syslog-ng package on pfSense
b) configures Syslog-ng in Services / Syslog-ng / General as follows
Enable (checked)
Interface Selection: LAN
Default Port: 5140
Leaving the rest unchanged and Save
c) Now configure the default syslog pfSense to send logs to a remote server where the "remote server" is the same pfSense, then go to Status / System / Settings, activate Enable Remote Logging and put as ip address of the remote server to the LAN interface with the 5140 port, for example 192.168.1.1:5140, for Remote Syslog Contents choose what you want to send. Finally Save
As a final result, Syslog-ng logs will be found in the pfSense filesystem, specifically in /var/syslog-ng/default.log and they can be rotated by turning the configuration of Syslog-ng