# playbook-rsyslog-to-graylog.yml
---
- name: Configure rsyslog to send logs to Graylog
  hosts: all
  become: yes
  vars:
    graylog_server: "192.168.123.16"
    graylog_port: "1514"
    
  tasks:
    - name: Install rsyslog
      apt:
        name: rsyslog
        state: present
        update_cache: yes
      when: ansible_os_family == "Debian"

    - name: Configure rsyslog to forward to Graylog
      copy:
        dest: /etc/rsyslog.d/90-graylog.conf
        content: |
          *.* @{{ graylog_server }}:{{ graylog_port }};RSYSLOG_SyslogProtocol23Format
        owner: root
        group: root
        mode: '0644'
      notify: restart rsyslog

    - name: Ensure rsyslog is enabled and running
      systemd:
        name: rsyslog
        enabled: yes
        state: started

    - name: Send test log message
      command: logger "Test depuis {{ ansible_hostname }} - Configured by Ansible"
      changed_when: false

  handlers:
    - name: restart rsyslog
      systemd:
        name: rsyslog
        state: restarted