Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated the action component to support logger facility #9

Merged
merged 1 commit into from
Jul 19, 2016

Conversation

tuxfight3r
Copy link

Provides optional logger facility to action component. default action doesnt expect facility to be declaerd. rspec tests has been updated for the action component to support the new features.

rsyslog::server::actions:
  all_logs:
    type: omfile
    facility: "*.*;auth,authpriv.none"
    config:
      dynaFile: "remoteSyslog"
      specifics: "/var/log/test"
  kern_logs:
    type: omfile
    facility: "kern.*"
    config:
      dynaFile: "remoteSyslog"
      file: "/var/log/kern.log"
      cmd: "/proc/cmdline"
  elasticsearch:
    type: omelasticsearch
    config:
      template: "plain-syslog"
      searchIndex: "logstash-index"
      queue.type: "linkedlist"
      queue.spoolDirectory: "/var/log/rsyslog/queue"
      queue.filename: "dbq"
      queue.maxdiskspace: "100g"
      queue.maxfilesize: "100m"
      queue.SaveOnShutdown: "on"
      server: "10.8.200.38"
      action.resumeretrycount: "-1"
      bulkmode: "on"
      dynSearchIndex: "on"

would create the following content. If the options are less than 3 the content would be on a single line and if it exceeds more than 2 options the content would be formated similar to kern_logs to provide readability.

# all_logs
*.*;auth,authpriv.none         action(type="omfile" dynaFile="remoteSyslog" specifics="/var/log/test" )

# kern_logs
kern.*                         action(type="omfile"  
                                 dynaFile="remoteSyslog"
                                 file="/var/log/kern.log"
                                 cmd="/proc/cmdline"
                               )

# elasticsearch
action(type="omelasticsearch"
  template="plain-syslog"
  searchIndex="logstash-index"
  queue.type="linkedlist"
  queue.spoolDirectory="/var/log/rsyslog/queue"
  queue.filename="dbq"
  queue.maxdiskspace="100g"
  queue.maxfilesize="100m"
  queue.SaveOnShutdown="on"
  server="10.8.200.38"
  action.resumeretrycount="-1"
  bulkmode="on"
  dynSearchIndex="on"
)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants