Generally it is the location under which log files <i>should</i> be written - the OS will do so (/var/adm/messages, etc.,) - and 'dynamic' and 'variable' info - such as mail.
What 3rd part s/w does is up to it (and any install options you get).