# -*- coding: utf-8 -*- # vim: ft=yaml --- rsyslog: client: enabled: true run_user: root run_group: adm output: remote: log.chaos: action: '@log.chaos' filter: "*.*" enabled: true # target: 192.168.10.2 # omit if you do not want to forward logs # # NOTE: be careful using target and listen on # # the same server, you can cause a loop # #targets: # If you want to use more than one target, # # - log1.example.com # you can specify targets as a list. # # - log2.example.com # The single 'target' directive takes precendence over this however. # # protocol: udp # protocol to use to send to target # listentcp: false # omit to disable listening on tcp port # listentcpprt: 10514 # specify tcp listen port ($InputTCPServerRun) # listenudp: false # omit to disable listening on udp port # impstats: false # impstats set to true to enable impstats # impstatsinterval: 600 # impstats interval to gather stats # impstatsseverity: 6 # The numerical syslog severity code to be used for generated messages. Default is 6(info) # impstatsresetcounters: 'on' # When set to “on”, counters are automatically reset after they are emitted # impstatslogsyslog: 'on' # This is a boolean setting specifying if data should be sent to the usual syslog stream # impstatsformat: legacy # Impstats format. Legacy is default but other options can be used. # impstatssyslogrule: 'syslog.=debug /var/log/rsyslog-stats' # Impstats log rule. # imkllog: true # omit to log kernel messages # imjournal: false # omit to log journal messages # immark: false # enable/disable mark messages support # markmessageperiod: 1200 # Specifies when mark messages are written (seconds) # #logbasepath: /mnt/logs # base path for logs to be saved to # # also enables logging per host, per day # fileowner: root # set the owner of the logfiles # filegroup: adm # set the group of the logfiles # filemode: '0640' # mode for created log files # dirmode: '0755' # mode for dirs created in log file paths # template: 'RSYSLOG_FileFormat' # file default template #custom: # Put custom config files in /etc/rsyslog.d/. # - 001_custom1.conf # Files must be reachable from path `salt://rsyslog/` # - salt://some_other/002_custom2.conf # Or with an absolute path. # # The default is to include `salt://rsyslog/files/50-default.conf`. # # If you change the custom conf dict, make sure to # # include the 50-default.conf as well if needed. # # modules: # Install additional rsyslog module packages # - gnutls # Currently supported are these modules, which are present in # - elasticsearch # Debian and CentOS. # - gssapi # - kafka # - mysql # - pgsql # - relp