Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Enable Splunk log fowarding

Browse source
This commit is contained in:
Andrew Heath 2023-08-21 17:36:17 -04:00
parent 71c79dc48b
commit 02046fdc0c
1 changed files with 16 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

32
roles/base/files/rsyslog/rsyslog.conf.log01.iad2.fedoraproject.org
View file

@ -164,22 +164,22 @@ kern.* ?r_kern;TraditionalFormat
#*.* @@splunk-syslog.corp.redhat.com:6514
#*.* @@10.31.20.29:6514
# $DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
# *.* action(
# type="omfwd"
# target="10.31.20.29"
# port="6514"
# protocol="tcp"
# queue.filename="fwdRule1" # unique name prefix for spool files
# queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
# queue.saveonshutdown="on" # save messages to disk on shutdown
# queue.type="LinkedList" # run asynchronously
# queue.size="100000"
# action.resumeRetryCount="10" # 10 retries if host is down
# StreamDriver="gtls"
# StreamDriverMode="1"
# StreamDriverAuthMode="anon" # not authenticated
# )
$DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
*.* action(
type="omfwd"
target="10.31.20.29"
port="6514"
protocol="tcp"
queue.filename="fwdRule1" # unique name prefix for spool files
queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
queue.saveonshutdown="on" # save messages to disk on shutdown
queue.type="LinkedList" # run asynchronously
queue.size="100000"
action.resumeRetryCount="10" # 10 retries if host is down
StreamDriver="gtls"
StreamDriverMode="1"
StreamDriverAuthMode="anon" # not authenticated
)