/var/log/elasticsearch/*.log { daily rotate 50 size 50M copytruncate compress delaycompress missingok notifempty create 644 elasticsearch elasticsearch }