logrotate-audispd.j2

{{ ansible_managed | comment }}
## /etc/logrotate.d/audispd
{{ audisp_syslog_target }} {
    rotate {{ auditd_logrotate_days | default(30) | int }}
    daily
    missingok
    delaycompress
    compress
    create 640 {{ syslog_user }} adm
    sharedscripts
{% if auditd_reporting %}
    prerotate
        test ! -x /usr/local/scripts/{{ audispd_reporting_template | basename }} || {% if ansible_distribution == 'Ubuntu' %}sudo -u {{ syslog_user }} {% endif %}/usr/local/scripts/{{ audispd_reporting_template | basename }} 2>&1 | {% if ansible_distribution == 'Ubuntu' %}sudo -u {{ syslog_user }} {% endif %}tee {{ audispd_reporting_dest }}/audispd-report-`date +%Y%m%d` >/dev/null
    endscript
{% endif %}
}