/var/log/mozdef/mongo/*.log
{
su mozdef mozdef
rotate 4
weekly
missingok
notifempty
compress
sharedscripts
postrotate
mv /var/log/mozdef/mongo/*.gz /var/logarchive/mozdef/
service rsyslog reload-or-restart > /dev/null
endscript
}