- type: log
enabled: True
paths:
- /var/log/samba/audit_*.log
exclude_files:
- '\.[gx]z$'
- '\.\d+$'