control: any:: SyslogDate = ( ExecShellResult(/bin/date "+%Y%m%d") ) CompressCommand = ( "/usr/bin/bzip2 -9" ) filters: LogServer:: { RotatedLogs NameRegex: ".*\.log\.[0-9]+$" Type: "reg" Result: "NameRegex.Type" } { CurrentLogs NameRegex: ".*$(SyslogDate)\.log$" Type: "reg" Result: "NameRegex.Type" } { OldLogs NameRegex: ".*$(SyslogDate)\.log$" Type: "reg" Result: "!NameRegex.Type" } files: LogServer:: $(RemoteLogDir)/*/* owner=root group=root mode=640 recurse=10 action=fixall filter=CurrentLogs $(RemoteLogDir)/*/* owner=root group=root mode=640 recurse=10 action=compress filter=OldLogs