42 lines
1.0 KiB
YAML
42 lines
1.0 KiB
YAML
# playbook-rsyslog-to-graylog.yml
|
|
---
|
|
- name: Configure rsyslog to send logs to Graylog
|
|
hosts: all
|
|
become: yes
|
|
vars:
|
|
graylog_server: "192.168.123.16"
|
|
graylog_port: "1514"
|
|
|
|
tasks:
|
|
- name: Install rsyslog
|
|
apt:
|
|
name: rsyslog
|
|
state: present
|
|
update_cache: yes
|
|
when: ansible_os_family == "Debian"
|
|
|
|
- name: Configure rsyslog to forward to Graylog
|
|
copy:
|
|
dest: /etc/rsyslog.d/90-graylog.conf
|
|
content: |
|
|
*.* @{{ graylog_server }}:{{ graylog_port }};RSYSLOG_SyslogProtocol23Format
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
notify: restart rsyslog
|
|
|
|
- name: Ensure rsyslog is enabled and running
|
|
systemd:
|
|
name: rsyslog
|
|
enabled: yes
|
|
state: started
|
|
|
|
- name: Send test log message
|
|
command: logger "Test depuis {{ ansible_hostname }} - Configured by Ansible"
|
|
changed_when: false
|
|
|
|
handlers:
|
|
- name: restart rsyslog
|
|
systemd:
|
|
name: rsyslog
|
|
state: restarted |