e7b341a8d9
The role is creating the 'adm' group for the rsyslog user but the template was using the 'syslog' group. Change-Id: I1dee3b0554ca6a7f96fab720d834daf55b9c4dd7
64 lines
2.0 KiB
Django/Jinja
64 lines
2.0 KiB
Django/Jinja
# {{ ansible_managed }}
|
|
|
|
#################
|
|
#### MODULES ####
|
|
#################
|
|
module(load="imuxsock") # provides support for local system logging
|
|
module(load="imklog") # provides kernel logging support
|
|
|
|
###########################
|
|
#### GLOBAL DIRECTIVES ####
|
|
###########################
|
|
|
|
# Use traditional timestamp format.
|
|
# To enable high precision timestamps, comment out the following line.
|
|
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
|
|
|
|
# Filter duplicated messages
|
|
$RepeatedMsgReduction on
|
|
|
|
# Set the default permissions for all log files.
|
|
$FileOwner syslog
|
|
$FileGroup adm
|
|
$FileCreateMode 0640
|
|
$DirCreateMode 0755
|
|
$Umask 0022
|
|
$PrivDropToUser syslog
|
|
$PrivDropToGroup adm
|
|
|
|
# Where to place spool and state files
|
|
$WorkDirectory {{ rsyslog_server_spool_directory }}
|
|
|
|
|
|
# Log all remote messages into a sub directory
|
|
{% if rsyslog_server_storage_policy == "per_host" %}
|
|
template(name="DDF" type="string" string="{{ rsyslog_server_storage_directory }}/%hostname%/%programname%.log")
|
|
{% endif %}
|
|
{% if rsyslog_server_storage_policy == "per_program" %}
|
|
template(name="DDF" type="string" string="{{ rsyslog_server_storage_directory }}/%programname%.log")
|
|
{% endif %}
|
|
ruleset(name="remote"){
|
|
*.* -?DDF
|
|
}
|
|
|
|
# Switch back to default ruleset
|
|
$Ruleset RSYSLOG_DefaultRuleset
|
|
|
|
# Enable non-kernel facility klog messages
|
|
$KLogPermitNonKernelFacility on
|
|
|
|
{% if rsyslog_server_udp_reception == true %}
|
|
# Provides UDP syslog reception
|
|
module(load="imudp")
|
|
input(type="imudp" port="{{ rsyslog_server_udp_port }}" ruleset="remote" RateLimit.Interval="{{ rsyslog_server_ratelimit_interval }}" RateLimit.Burst="{{ rsyslog_server_ratelimit_burst }}")
|
|
{% endif %}
|
|
|
|
{% if rsyslog_server_tcp_reception == true %}
|
|
# Provides TCP syslog reception
|
|
module(load="imtcp")
|
|
input(type="imtcp" port="514" ruleset="remote" RateLimit.Interval="{{ rsyslog_server_ratelimit_interval }}" RateLimit.Burst="{{ rsyslog_server_ratelimit_burst }}")
|
|
{% endif %}
|
|
|
|
# Include all config files in /etc/rsyslog.d/
|
|
$IncludeConfig /etc/rsyslog.d/*.conf
|