/var/log/vyatta/ipsec.log {
	missingok
	nocompress
	size 1M
	rotate 2
	create 664 root root
        su root vyattacfg
}