Update Rsyslog.conf file

Update Rsyslog config file to use the Splunk LB for rsyslog rather than
one single host.
This commit is contained in:
Andrew Heath 2024-04-02 12:12:07 -04:00 committed by kevin
parent c600e6fba4
commit 74e536d639

View file

@ -161,21 +161,21 @@ kern.* ?r_kern;TraditionalFormat
#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%# #%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#
$DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem $DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
# *.* action( *.* action(
# type="omfwd" type="omfwd"
# target="10.31.20.29" target="10.23.176.84"
# port="6514" port="6514"
# protocol="tcp" protocol="tcp"
# queue.filename="fwdRule1" # unique name prefix for spool files queue.filename="fwdRule1" # unique name prefix for spool files
# queue.maxdiskspace="1g" # 1gb space limit (use as much as possible) queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
# queue.saveonshutdown="on" # save messages to disk on shutdown queue.saveonshutdown="on" # save messages to disk on shutdown
# queue.type="LinkedList" # run asynchronously queue.type="LinkedList" # run asynchronously
# queue.size="500000" queue.size="500000"
# action.resumeRetryCount="10" # 10 retries if host is down action.resumeRetryCount="10" # 10 retries if host is down
# StreamDriver="gtls" StreamDriver="gtls"
# StreamDriverMode="1" StreamDriverMode="1"
# StreamDriverAuthMode="anon" # not authenticated StreamDriverAuthMode="anon" # not authenticated
# ) )