/var/log/suricata/*.log /var/log/suricata/*.json {
    daily
    missingok
    rotate 5
    compress
    delaycompress
    minsize 500k
    sharedscripts
    postrotate
        /usr/sbin/suricatasc -c reopen-log-files >/dev/null 2>/dev/null || true
    endscript
}
