/var/log/knockd.log {
   missingok
   notifempty
   delaycompress
}
