/var/log/elasticsearch/*.log { compress copytruncate missingok }