Add log rotation for Suricata

Signed-off-by: KheOps <kheops@ceops.eu>
equalitie · Mar 12, 2015 · 2c426de · 2c426de
1 parent f68db3c
commit 2c426de
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/roles/common/tasks/ids.yml b/roles/common/tasks/ids.yml
@@ -33,6 +33,10 @@
   template: src=disable-network-offload-cron.j2 dest=/etc/cron.d/disable-network-offload-{{ monitored_interface }} owner=root group=root mode=0644
   tags: base
 
+- name: Install log rotation for Suricata log files
+  template: src=logrotate-suricata.j2 dest=/etc/logrotate.d/suricata owner=root group=root mode=0644
+  tags: base
+
 - name: Install Suricata configuration file
   template: src=suricata.yaml.j2 dest=/etc/suricata/suricata.yaml owner=root group=root mode=0644
   notify:

diff --git a/roles/common/templates/logrotate-suricata.j2 b/roles/common/templates/logrotate-suricata.j2
@@ -0,0 +1,12 @@
+/var/log/suricata/*.log {
+    weekly
+    compress
+    rotate 12
+    mail {{ admin_email }}
+    missingok
+    create
+    sharedscripts
+    postrotate
+        /bin/kill -HUP $(cat /var/run/suricata/suricata.pid)
+    endscript
+}