# uncomment this if you want your log files compressed
compress
+# packages drop log rotation information into this directory
+include /etc/logrotate.d
+
# wtmp
/var/log/wtmp {
- weekly
+ monthly
create 0664 root utmp
- rotate 1
+ rotate 12
}
/var/log/httpd/access_log /var/log/httpd/error_log /var/log/httpd/ssl_request_log /var/log/httpd/ssl_engine_log {
endscript
}
-/var/log/snort/alert {
+/var/log/suricata/*.log {
weekly
copytruncate
compress
ifempty
missingok
postrotate
- /usr/bin/find /var/log/snort -path '/var/log/snort/[0-9]*' -prune -exec /bin/rm -rf {} \;
- /usr/bin/find /var/log/snort -name 'snort.log.*' -mtime +28 -exec /bin/rm -rf {} \;
- /usr/local/bin/restartsnort
+ /bin/find /var/log/suricata -path '/var/log/suricata/[0-9]*' -prune -exec /bin/rm -rf {} \;
+ /bin/find /var/log/suricata -name 'fast.log.*' -mtime +28 -exec /bin/rm -rf {} \;
+ /bin/kill -HUP `cat /var/run/suricata.pid 2> /dev/null` 2> /dev/null || true
endscript
}
endscript
}
-/var/log/messages /var/log/boot.log /var/log/dhcpcd.log {
+/var/log/messages /var/log/bootlog /var/log/dhcpcd.log /var/log/mail {
create 664 root syslogd
sharedscripts
ifempty
notifempty
missingok
}
+
+/var/log/updatexlrator/*.log {
+ weekly
+ rotate 4
+ copytruncate
+ compress
+ notifempty
+ missingok
+}