feat: initial commit

tasks/config.yaml

@@ -0,0 +1,41 @@
+---
+
+# configure rsyslog
+- name: "config - rsyslog"
+  ansible.builtin.template:
+    src: "templates/rsylog/incoming-udp514.conf.j2"
+    dest: "/etc/rsyslog.d/incoming-udp514.conf"
+    owner: "root"
+    group: "root"
+    mode: "0644"
+  notify: "restart rsyslog"
+
+# configure logrotate
+- name: "config - logrotate"
+  ansible.builtin.template:
+    src: "templates/logrotate/remote-tmpfs.j2"
+    dest: "/etc/logrotate.d/remote-tmpfs.conf"
+    owner: "root"
+    group: "root"
+    mode: "0644"
+  notify: "restart rsyslog"
+
+# configure splunk universal forwarder - input
+- name: "config - splunk universal forwarder - input"
+  ansible.builtin.template:
+    src: "templates/splunkforwarder/inputs.conf.j2"
+    dest: "/opt/splunkforwarder/etc/system/local/inputs.conf"
+    owner: "splunkfwd"
+    group: "splunkfwd"
+    mode: "0644"
+  notify: "restart splunk"
+
+# configure splunk universal forwarder - outputs
+- name: "config - splunk universal forwarder - outputs"
+  ansible.builtin.template:
+    src: "templates/splunkforwarder/outputs.conf.j2"
+    dest: "/opt/splunkforwarder/etc/system/local/outputs.conf"
+    owner: "splunkfwd"
+    group: "splunkfwd"
+    mode: "0644"
+  notify: "restart splunk"