documentation_complete: true

title: 'Action for auditd to take when log files reach their maximum size'

description: 'The setting for max_log_file_action in /etc/audit/auditd.conf'

type: string

operator:

interactive: false

options:
    default: rotate
    ignore: ignore
    keep_logs: keep_logs
    rotate: rotate
    suspend: suspend
    syslog: syslog
