68 lines
2.5 KiB
YAML
68 lines
2.5 KiB
YAML
---
|
|
rsyslog_enable_remote_socket: False
|
|
rsyslog_enable_send_to_remote: False
|
|
rsyslog_enable_remote_udp: 'enabled'
|
|
rsyslog_udp_port: 514
|
|
rsyslog_enable_remote_tcp: 'disabled'
|
|
rsyslog_tcp_port: 514
|
|
|
|
rsyslog_remote_path: /var/log/remote
|
|
# RELP, actually. Plain TLS is unreliable
|
|
rsyslog_tls_status: 'disabled'
|
|
rsyslog_tls_deb_pkgs:
|
|
- 'rsyslog-gnutls'
|
|
|
|
rsyslog_tls_rh_pkgs:
|
|
- 'rsyslog-gnutls'
|
|
|
|
rsyslog_relp_port: '20514'
|
|
rsyslog_tls_certs_dir: /etc/pki/rsyslog
|
|
rsyslog_ca_is_remote: False
|
|
rsyslog_remote_ca_url: 'http://localhost/ca.pem'
|
|
rsyslog_tls_ca: "{{ rsyslog_tls_certs_dir }}/ca.pem"
|
|
rsyslog_tls_cert: "{{ rsyslog_tls_certs_dir }}/cert.pem"
|
|
rsyslog_tls_key: "{{ rsyslog_tls_certs_dir }}/cert.key"
|
|
|
|
rsyslog_remote_collector: '127.0.0.1'
|
|
|
|
rsyslog_firewalld_services:
|
|
- { service: 'syslog', state: '{{ rsyslog_enable_remote_udp }}', zone: '{{ firewalld_default_zone }}' }
|
|
# - { service: 'syslog-tls', state: '{{ rsyslog_tls_status }}', zone: '{{ firewalld_default_zone }}' }
|
|
|
|
rsyslog_firewalld_ports:
|
|
- { port: '{{ rsyslog_tcp_port }}', protocol: 'tcp', state: '{{ rsyslog_enable_remote_tcp }}', zone: '{{ firewalld_default_zone }}' }
|
|
- { port: '{{ rsyslog_relp_port }}', protocol: 'tcp', state: '{{ rsyslog_tls_status }}', zone: '{{ firewalld_default_zone }}' }
|
|
|
|
rsyslog_send_to_elasticsearch: False
|
|
|
|
rsyslog_use_inotify: True
|
|
# Not used when inotify is enabled
|
|
rsyslog_file_polling_interval: 10
|
|
|
|
# We use logstash if the elastisearch module is not enabled
|
|
#rsys_logstash_collector_host: logstash.t.hadoop.research-infrastructures.eu
|
|
rsys_logstash_collector_host: logstash
|
|
rsys_logstash_collector_port: 5544
|
|
|
|
# IMPORTANT: the log_state_file names must be unique
|
|
#rsys_logfiles:
|
|
# - { logfile: '/var/log/tomcat7/catalina.log', log_tag: 'solr-state', log_state_file: 'solr-state'}
|
|
# - { logfile: '/var/log/tomcat7/localhost_access.log', log_tag: 'solr-access', log_state_file: 'solr-access'}
|
|
|
|
rsyslog_use_queues: False
|
|
rsyslog_main_queue_size: 1000000
|
|
rsyslog_main_queue_debatchsize: 256
|
|
rsyslog_main_queue_workerthreads: 2
|
|
rsyslog_action_queue_debatchsize: 1024
|
|
rsyslog_action_queue_size: 100000
|
|
rsyslog_action_queue_workerthreads: 5
|
|
# -1 means retry indefinitely if ES is unreachable
|
|
rsyslog_action_resumeretrycount: -1
|
|
|
|
# The elasticsearch module bypasses logstash and talks directly to elasticsearch
|
|
rsyslog_use_elasticsearch_module: True
|
|
#rsys_elasticsearch_collector_host: logstash.t.hadoop.research-infrastructures.eu
|
|
rsys_elasticsearch_collector_host: logstash
|
|
rsys_elasticsearch_collector_port: 9200
|
|
|