https://github.com/jabbber/note/blob/master/samba.md
tell logrotate to archive the files daily – /etc/logrotate.d/smbd_audit
/var/log/samba/audit.log
{
rotate 7
daily
missingok
notifempty
delaycompress
compress
postrotate
invoke-rc.d rsyslog rotate > /dev/null
endscript
}