# logfilename			[owner:group]	mode	count	size	when	flags	[/pid_file]				[sig_num]
{% if not helpers.empty('OPNsense.IDS.general.enabled') %}
/var/log/suricata/stats.log	root:wheel	640	7	*	$D0	B	/var/run/suricata.pid	1
/var/log/suricata/eve.json	root:wheel	640	{{ OPNsense.IDS.general.AlertSaveLogs|default("4") }}	500000	${{
    OPNsense.IDS.general.AlertLogrotate|default("W0D23")
}}	B	/var/run/suricata.pid	1
{% endif %}