Sumo Logic Agent

This role installs to Sumo Logic collector agent on RHEL-based Linux.

Requirements

The Sumo Logic-provided RPM includes all software dependencies, however, it would be worth reviewing the current sys reqs.

Role Variables

Required:

• sumologic_rpm_url - For some reason Sumo's RPMs are pod-specific, meaning you have to download a different RPM depending on where your pod is hosted. Check here for the RPM for your pod's region.
• sumologic_access_id - What it says on the tin.
• sumologic_access_key - Same as above.

Optional:

• sumologic_ephemeral_agent - Defaults to true. Otherwise, you'll be manually deleting un-used and non-existent collectors out of the Sumo console. If you'd prefer that, set to false.
• env_timezone - Defaults to UTC. If you'd like something, set using the TZ format.
• sumologic_tracked_logs - The linux secure, messages, and yum logs are tracked by default.

Dependencies

None

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

  ---
  - hosts: servers
    become: yes
    vars_files:
      - group_vars/env.yml
    roles:
       - { role: chrisdodds.sumologic-agent }

Inside your group_vars env file

---
# env vars
sumologic_rpm_url: 'https://collectors.us2.sumologic.com/rest/download/rpm/64'
sumologic_access_id: 'XXXXXXXX'
sumologic_access_key: 'XXXXXXX'
sumologic_tracked_logs:
  - name: "nginx access" 
    description: "nginx access log"
    category: "application/prod/nginx"
    path: "/var/log/nginx/access.log
    filters: "{ json block per Sumo Logic's documentation }"        

License

MIT

Author Information

Chris Dodds - @liquid_chickens - chrisdodds.net