Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

rsyslog: comment out splunk receiver to unblock rsyslog

Browse source 
Splunk receiver seems unresponsive since Feb 12 and result in rsyslog on
log01 to stop logging.
I disabled it for now so we don't loose more logs.
This commit is contained in:
Francois Andrieu 2024-02-15 19:06:22 +01:00
parent f6d4ffc6f4
commit 6f949fe3eb
No known key found for this signature in database
1 changed files with 15 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

30
roles/base/files/rsyslog/rsyslog.conf.log01.iad2.fedoraproject.org
View file

@ -161,21 +161,21 @@ kern.* ?r_kern;TraditionalFormat
#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#
$DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
*.* action(
type="omfwd"
target="10.31.20.29"
port="6514"
protocol="tcp"
queue.filename="fwdRule1" # unique name prefix for spool files
queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
queue.saveonshutdown="on" # save messages to disk on shutdown
queue.type="LinkedList" # run asynchronously
queue.size="500000"
action.resumeRetryCount="10" # 10 retries if host is down
StreamDriver="gtls"
StreamDriverMode="1"
StreamDriverAuthMode="anon" # not authenticated
)
# *.* action(
# type="omfwd"
# target="10.31.20.29"
# port="6514"
# protocol="tcp"
# queue.filename="fwdRule1" # unique name prefix for spool files
# queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
# queue.saveonshutdown="on" # save messages to disk on shutdown
# queue.type="LinkedList" # run asynchronously
# queue.size="500000"
# action.resumeRetryCount="10" # 10 retries if host is down
# StreamDriver="gtls"
# StreamDriverMode="1"
# StreamDriverAuthMode="anon" # not authenticated
# )