1 2 3 4 5 6 7 8 9 10
/var/log/suricata/*.log /var/log/suricata/*.json { rotate 3 missingok nocompress create sharedscripts postrotate /etc/init.d/suricata relog endscript }