/var/log/auth.log { rotate 3 weekly }