1 2 3 4 5 6 7 8 9 10 11 12
/var/log/snort/*.log /var/log/snort/alert { size 1M missingok compress delaycompress rotate 10 sharedscripts postrotate /etc/init.d/snort restart endscript }