Hi dwoeltje,

your postrotate script seems to be set to remove uncompressed rotated files("rm /var/log/audit/taudit.log-????????") - do you actually see those? Or is that a simple clean-up measure in case someone uncompressed old logrotates and leaves them in that directory?

Regards,
Jens

Regards,
Jens