Enable Splunk log fowarding

This commit is contained in:
Andrew Heath 2023-08-21 17:36:17 -04:00
parent 71c79dc48b
commit 02046fdc0c

View file

@ -164,22 +164,22 @@ kern.* ?r_kern;TraditionalFormat
#*.* @@splunk-syslog.corp.redhat.com:6514 #*.* @@splunk-syslog.corp.redhat.com:6514
#*.* @@10.31.20.29:6514 #*.* @@10.31.20.29:6514
# $DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem $DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
# *.* action( *.* action(
# type="omfwd" type="omfwd"
# target="10.31.20.29" target="10.31.20.29"
# port="6514" port="6514"
# protocol="tcp" protocol="tcp"
# queue.filename="fwdRule1" # unique name prefix for spool files queue.filename="fwdRule1" # unique name prefix for spool files
# queue.maxdiskspace="1g" # 1gb space limit (use as much as possible) queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
# queue.saveonshutdown="on" # save messages to disk on shutdown queue.saveonshutdown="on" # save messages to disk on shutdown
# queue.type="LinkedList" # run asynchronously queue.type="LinkedList" # run asynchronously
# queue.size="100000" queue.size="100000"
# action.resumeRetryCount="10" # 10 retries if host is down action.resumeRetryCount="10" # 10 retries if host is down
# StreamDriver="gtls" StreamDriver="gtls"
# StreamDriverMode="1" StreamDriverMode="1"
# StreamDriverAuthMode="anon" # not authenticated StreamDriverAuthMode="anon" # not authenticated
# ) )