41 lines
1.2 KiB
YAML
41 lines
1.2 KiB
YAML
---
|
|
|
|
# configure rsyslog
|
|
- name: "config - rsyslog"
|
|
ansible.builtin.template:
|
|
src: "templates/rsylog/incoming-udp514.conf.j2"
|
|
dest: "/etc/rsyslog.d/incoming-udp514.conf"
|
|
owner: "root"
|
|
group: "root"
|
|
mode: "0644"
|
|
notify: "restart rsyslog"
|
|
|
|
# configure logrotate
|
|
- name: "config - logrotate"
|
|
ansible.builtin.template:
|
|
src: "templates/logrotate/remote-tmpfs.j2"
|
|
dest: "/etc/logrotate.d/remote-tmpfs.conf"
|
|
owner: "root"
|
|
group: "root"
|
|
mode: "0644"
|
|
notify: "restart rsyslog"
|
|
|
|
# configure splunk universal forwarder - input
|
|
- name: "config - splunk universal forwarder - input"
|
|
ansible.builtin.template:
|
|
src: "templates/splunkforwarder/inputs.conf.j2"
|
|
dest: "/opt/splunkforwarder/etc/system/local/inputs.conf"
|
|
owner: "splunkfwd"
|
|
group: "splunkfwd"
|
|
mode: "0644"
|
|
notify: "restart splunk"
|
|
|
|
# configure splunk universal forwarder - outputs
|
|
- name: "config - splunk universal forwarder - outputs"
|
|
ansible.builtin.template:
|
|
src: "templates/splunkforwarder/outputs.conf.j2"
|
|
dest: "/opt/splunkforwarder/etc/system/local/outputs.conf"
|
|
owner: "splunkfwd"
|
|
group: "splunkfwd"
|
|
mode: "0644"
|
|
notify: "restart splunk"
|