/var/log/modsec_audit.log { missingok notifempty create 640 http http sharedscripts compress endscript }