create rsyslog role which logs everything to /var/log/all.log

This commit is contained in:
Timo Makinen 2019-05-29 00:07:39 +03:00
parent e0b519cf21
commit 13f0332fa1
4 changed files with 43 additions and 0 deletions

View file

@ -42,6 +42,7 @@
name: "{{ role }}"
with_items:
- iptables
- rsyslog
- selinux
loop_control:
loop_var: role

View file

@ -0,0 +1,6 @@
/var/log/all.log {
create 0640 root root
postrotate
/bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
endscript
}

View file

@ -0,0 +1,5 @@
---
- name: restart rsyslog
service:
name: rsyslog
state: restarted

View file

@ -0,0 +1,31 @@
---
- name: install packages
package:
name: "{{ item }}"
state: installed
with_items:
- rsyslog
- rsyslog-gnutls
- name: configure all.log
copy:
dest: /etc/rsyslog.d/all.log.conf
content: "*.* /var/log/all.log\n"
mode: 0644
owner: root
group: "{{ ansible_wheel }}"
notify: restart rsyslog
- name: enable rsyslog service
service:
name: rsyslog
state: started
- name: enable all.log rotation
copy:
dest: /etc/logrotate.d/syslog.all
src: logrotate
mode: 0644
owner: root
group: "{{ ansible_wheel }}"