current/SOURCES/snort.logrotate


# (oe) catch time stamped logs like (/var/log/snort/snort.log.1110567861),
# use something like "-L /var/log/snort/snort.log" to prevent that.

/var/log/snort/*.log /var/log/snort/*.log.[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9] 
/var/log/snort/*/*.log /var/log/snort/*/*.log.[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]
/var/log/snort/alert /var/log/snort/*/alert {
    daily
    rotate 7
    missingok
    compress
    postrotate
        /etc/rc.d/init.d/snort condrestart 1>/dev/null || true
    endscript
}
1	dlucio	30270
2			# (oe) catch time stamped logs like (/var/log/snort/snort.log.1110567861),
3			# use something like "-L /var/log/snort/snort.log" to prevent that.
4
5			/var/log/snort/.log /var/log/snort/.log.[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]
6			/var/log/snort//.log /var/log/snort//.log.[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]
7			/var/log/snort/alert /var/log/snort/*/alert {
8			daily
9			rotate 7
10			missingok
11			compress
12			postrotate
13			/etc/rc.d/init.d/snort condrestart 1>/dev/null \|\| true
14			endscript
15			}