---

# configure rsyslog
- name: "config - rsyslog"
  ansible.builtin.template:
    src: "templates/rsyslog/incoming-udp514.conf.j2"
    dest: "/etc/rsyslog.d/incoming-udp514.conf"
    owner: "root"
    group: "root"
    mode: "0644"
  notify: "restart rsyslog"

# configure logrotate
- name: "config - logrotate"
  ansible.builtin.template:
    src: "templates/logrotate/remote-tmpfs.j2"
    dest: "/etc/logrotate.d/remote-tmpfs.conf"
    owner: "root"
    group: "root"
    mode: "0644"
  notify: "restart rsyslog"

# configure splunk universal forwarder - input
- name: "config - splunk universal forwarder - input"
  ansible.builtin.template:
    src: "templates/splunkforwarder/inputs.conf.j2"
    dest: "/opt/splunkforwarder/etc/system/local/inputs.conf"
    owner: "splunkfwd"
    group: "splunkfwd"
    mode: "0644"
  notify: "restart splunk"

# configure splunk universal forwarder - outputs
- name: "config - splunk universal forwarder - outputs"
  ansible.builtin.template:
    src: "templates/splunkforwarder/outputs.conf.j2"
    dest: "/opt/splunkforwarder/etc/system/local/outputs.conf"
    owner: "splunkfwd"
    group: "splunkfwd"
    mode: "0644"
  notify: "restart splunk"