logrotate:
  config:
    /opt/so/log/idstools/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/nginx/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/soc/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/kratos/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/kibana/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/influxdb/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/elastalert/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/soctopus/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/curator/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/fleet/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/suricata/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/mysql/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/telegraf/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/redis/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/sensoroni/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/stenographer/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/salt/so-salt-minion-check:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/salt/minion:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/salt/master:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /nsm/idh/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/playbook/*.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
      - su root socore
    /nsm/strelka/log/strelka.log:
      - daily
      - rotate 14
      - missingok
      - copytruncate
      - compress
      - create
      - extension .log
      - dateext
      - dateyesterday
    /opt/so/log/sensor_clean.log:
      - daily
      - rotate 2
      - missingok
      - nocompress
      - create
      - sharedscripts