While I'm using syslog-ng with hardened conf, I notice that we have: auth.log audit.log daemon.log and so on, but the syslog file in logrotate.d shows only messages, so not all files are rotated. vrt ~ # cat /etc/logrotate.d/syslog-ng # $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.logrotate.in,v 1.1 2014/01/22 04:25:35 mr_bones_ Exp $ # # Syslog-ng logrotate snippet for Gentoo Linux # contributed by Michael Sterrett # /var/log/messages { missingok sharedscripts postrotate /etc/init.d/syslog-ng reload > /dev/null 2>&1 || true endscript }
hardened is pretty much unmaintained. You can use /usr/share/doc/syslog-ng-3.5.6/syslog-ng.logrotate.hardened.bz2 as the start for customizing the logrotate config to suite your needs.