Hi , ( RED HAT ENTERPRISE LINUX 5 )
I'd like to know how do I rotate the audit logs under "/var/log/audit/audit.log" every 6 month. Currently I have set the parameter inside /etc/audit/auditd.conf to "KEEP_LOGS" (Previously "ROTATE" )and logs files are generated up to the size 5M and never deleted.
Do I need to change inside "/etc/audit/audit.rules" file?

[root@RHEL5 ~]# more /etc/audit/auditd.conf
#
# This file controls the configuration of the audit daemon
#


log_file = /var/log/audit/audit.log
log_format = RAW
log_group = root
priority_boost = 3
flush = INCREMENTAL
freq = 20
num_logs = 4
disp_qos = lossy
dispatcher = /sbin/audispd
name_format = NONE
##name = mydomain
max_log_file = 5
max_log_file_action = KEEP_LOGS ( Initial Setting was "ROTATE" )
space_left = 75
space_left_action = SYSLOG
action_mail_acct = root
admin_space_left = 50
admin_space_left_action = SUSPEND
disk_full_action = SUSPEND
disk_error_action = SUSPEND

Have you considered creating a cron job to do it?

it_guy,

You seem to have clicked the "Report" button instead of the "Quote" one. Please try again.

BTW, it is generally unnecessary to quote the immediately preceding post in order to answer it. In fact, that can clutter your post & make it harder to read & understand.