OK, let's do a lab.
Make sure the systemd journal is persistent.
Create an entry in rsyslog that writes all messages
with the severity of error or higher to varlogerror.
And ensure that varlogerror is rotated on a monthly basis,
and the last 12 logs are kept before they are rotated out.