Ajouter greylog-client.yml

greylog-client.yml

@@ -0,0 +1,42 @@
+# playbook-rsyslog-to-graylog.yml
+---
+- name: Configure rsyslog to send logs to Graylog
+  hosts: all
+  become: yes
+  vars:
+    graylog_server: "192.168.123.16"
+    graylog_port: "1514"
+    
+  tasks:
+    - name: Install rsyslog
+      apt:
+        name: rsyslog
+        state: present
+        update_cache: yes
+      when: ansible_os_family == "Debian"
+
+    - name: Configure rsyslog to forward to Graylog
+      copy:
+        dest: /etc/rsyslog.d/90-graylog.conf
+        content: |
+          *.* @{{ graylog_server }}:{{ graylog_port }};RSYSLOG_SyslogProtocol23Format
+        owner: root
+        group: root
+        mode: '0644'
+      notify: restart rsyslog
+
+    - name: Ensure rsyslog is enabled and running
+      systemd:
+        name: rsyslog
+        enabled: yes
+        state: started
+
+    - name: Send test log message
+      command: logger "Test depuis {{ ansible_hostname }} - Configured by Ansible"
+      changed_when: false
+
+  handlers:
+    - name: restart rsyslog
+      systemd:
+        name: rsyslog
+        state: restarted