/var/log/elasticsearch/elasticsearch.log { daily missingok rotate 30 compress delaycompress notifempty create 640 elasticsearch elasticsearch su root elasticsearch }