From e6ae1af85f6905d900590775e84afd9dfab5ede7 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Wed, 17 Feb 2021 10:47:06 -0500
Subject: [PATCH] test rotating strelka log at 100k

---
 salt/common/files/sensor-rotate.conf | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/salt/common/files/sensor-rotate.conf b/salt/common/files/sensor-rotate.conf
index a7e4cb303..0529939d9 100644
--- a/salt/common/files/sensor-rotate.conf
+++ b/salt/common/files/sensor-rotate.conf
@@ -8,3 +8,17 @@
     sharedscripts
     endscript
 }
+
+/nsm/strelka/log/strelka.log
+{
+    #daily
+    size 100k
+    rotate 14
+    missingok
+    copytruncate
+    compress
+    create
+    extension .log
+    dateext
+    dateyesterday
+}
\ No newline at end of file