/var/lib/ossec/logs/active-responses.log {
	missingok
	notifempty
	su ossec ossec
	compress
}

/var/lib/ossec/logs/ossec.log {
	missingok
	notifempty
	compress
	su ossec ossec
}
