I have a SLES 11 server that is accepting syslog data from a remote system (thanks to assistance I got on this forum). The data that system is sending to the SLES 11 system amounts to between 5GB and 6GB per hour. The file it is putting the data into, on the SLES 11 system, is /var/log/audit/taudit.log.

I've created a file in the /etc/cron.hourly directory called syslog and I did a chmod against that file in this fashion:

(in the /etc/cron.hourly directory)
chmod 755 syslog

This is the contents of that file:

/var/log/audit/taudit.log {
compress
dateext
maxage 30
rotate 72
missingok
notifempty
size +4096k
create 640 root root
sharedscripts
postrotate
/etc/init.d/syslog reload
endscript
}

But I still cannot get a logrotation to happen. And I have stopped and restarted the cron service.