Ok, now I see 1.5 is different from 1.4:

```
1.5:

[root@hp-dl380pgen8-02-vm-3 ~]# ls /var/log/httpd/*log -1
/var/log/httpd/access_log
/var/log/httpd/default_error.log
/var/log/httpd/error_log
/var/log/httpd/foreman_access.log
/var/log/httpd/foreman_error.log
/var/log/httpd/foreman-ssl_access_ssl.log
/var/log/httpd/foreman-ssl_error_ssl.log
/var/log/httpd/puppet_access_ssl.log
/var/log/httpd/puppet_error_ssl.log

1.4:

[root@foreman ~]# ls /var/log/httpd/*log -1
/var/log/httpd/access_log
/var/log/httpd/default_error.log
/var/log/httpd/error_log
/var/log/httpd/foreman.virtual.lan_access.log
/var/log/httpd/foreman.virtual.lan_access_ssl.log
/var/log/httpd/foreman.virtual.lan_error.log
/var/log/httpd/foreman.virtual.lan_error_ssl.log
/var/log/httpd/puppet_access_ssl.log
/var/log/httpd/puppet_error_ssl.log
/var/log/httpd/ssl_access_log
/var/log/httpd/ssl_error_log
/var/log/httpd/ssl_request_log
```

For this reason I am merging 50-* rules into one simple 50-httpd:

/var/log/httpd/*.log

(apache2 on Debians)

Thanks for review!

-- 
Later,

 Lukas "lzap" Zapletal
 irc: lzap #theforeman