8.0 introduces an adjusted compression/rollover strategy for audit logging [1]. This new strategy isn't present in 7.x (because it's considered a breaking change), but the 7.11 docs make mention it [2].
[1] #64472
[2] https://www.elastic.co/guide/en/elasticsearch/reference/7.11/audit-log-output.html#audit-log-settings