/var/log/modsec_audit.log {
missingok
notifempty
create 640 http http
sharedscripts
compress
endscript
}