Rotating the alerts.json file leaves file handles open

[khurlic]

lsof -p 13604
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
ossec-ana 13604 ossec cwd DIR 202,1 4096 159447 /var/ossec
ossec-ana 13604 ossec rtd DIR 202,1 4096 159447 /var/ossec
ossec-ana 13604 ossec txt REG 202,1 262809 159582 /var/ossec/bin/ossec-analysisd
ossec-ana 13604 ossec mem REG 202,1 43616 396082 /lib/x86_64-linux-gnu/libnss_files-2.19.so
ossec-ana 13604 ossec mem REG 202,1 47760 396084 /lib/x86_64-linux-gnu/libnss_nis-2.19.so
ossec-ana 13604 ossec mem REG 202,1 97296 396079 /lib/x86_64-linux-gnu/libnsl-2.19.so
ossec-ana 13604 ossec mem REG 202,1 39824 396080 /lib/x86_64-linux-gnu/libnss_compat-2.19.so
ossec-ana 13604 ossec mem REG 202,1 1840928 396048 /lib/x86_64-linux-gnu/libc-2.19.so
ossec-ana 13604 ossec mem REG 202,1 141574 396101 /lib/x86_64-linux-gnu/libpthread-2.19.so
ossec-ana 13604 ossec mem REG 202,1 1071552 396071 /lib/x86_64-linux-gnu/libm-2.19.so
ossec-ana 13604 ossec mem REG 202,1 149120 396038 /lib/x86_64-linux-gnu/ld-2.19.so
ossec-ana 13604 ossec 0u CHR 1,3 0t0 4100 /dev/null
ossec-ana 13604 ossec 1u CHR 1,3 0t0 4100 /dev/null
ossec-ana 13604 ossec 2u CHR 1,3 0t0 4100 /dev/null
ossec-ana 13604 ossec 3u unix 0xffff880ee4e412c0 0t0 23406183 /queue/ossec/queue
ossec-ana 13604 ossec 4u REG 202,1 0 159694 /var/ossec/queue/fts/hostinfo
ossec-ana 13604 ossec 5u REG 202,1 106 159681 /var/ossec/queue/fts/fts-queue
ossec-ana 13604 ossec 6u REG 202,1 0 159682 /var/ossec/queue/fts/ig-queue
ossec-ana 13604 ossec 7u unix 0xffff880ee4e40f00 0t0 23406187 socket
ossec-ana 13604 ossec 8w REG 202,1 0 657002 /var/ossec/logs/archives/2016/Sep/ossec-archive-30.log
ossec-ana 13604 ossec 9w REG 202,1 42793 657023 /var/ossec/logs/alerts/2016/Sep/ossec-alerts-30.log
ossec-ana 13604 ossec 10w REG 202,1 1387210 659131 /var/ossec/logs/alerts/2016/Sep/ossec-alerts-29.json (deleted)
ossec-ana 13604 ossec 11w REG 202,1 0 657038 /var/ossec/logs/firewall/2016/Sep/ossec-firewall-30.log
ossec-ana 13604 ossec 12u REG 202,1 1484 160623 /var/ossec/queue/rootcheck/rootcheck
ossec-ana 13604 ossec 13u REG 202,1 468298 160624 /var/ossec/queue/syscheck/syscheck
ossec-ana 13604 ossec 14w REG 202,1 49033 657030 /var/ossec/logs/alerts/2016/Sep/ossec-alerts-30.json