Hi all !
My Suricata 6.0 is running in a Docker container. It works perfectly but i have a problem with the logrotate.
The first time, it works perfectly. The file eve.json-20201128 has been created and a new eve.json has
been created too and this new file is filled correctly
The second times, the file eve.json-20201129 has been created with a new eve.json.
The problem is that the eve.json remains at zero and the old file eve.json-2020112 is filled
I have tried a lot of configuration and it’s the same every time
Here is my suricata file in /etc/logrotate.d/
/usr/bin/docker exec id_container suricatasc -c reopen-log-files
Do you have an idea on how resolve this problem ?