soc-ops/global/overlay/etc/puppet/modules/soc/templates/rsyslog/rsyslog-remote-gelf.conf.erb

26 lines
755 B
Text
Raw Normal View History

# Remote syslog configuration managed by Puppet (sunet::rsyslog)
# Remote enabled by syslog_enable_remote: <%= @do_remote %>
template(name="gelf" type="list") {
constant(value="{\"version\":\"1.1\",")
constant(value="\"host\":\"")
property(name="hostname")
constant(value="\",\"short_message\":\"")
property(name="msg" format="json")
constant(value="\",\"timestamp\":\"")
property(name="timegenerated" dateformat="unixtimestamp")
constant(value="\",\"level\":\"")
property(name="syslogseverity")
constant(value="\"}")
}
<% @gelf_graylog_servers.each do |server| -%>
action(
type="omfwd"
target="<%= server.split(':')[0] %>"
port="<%= server.split(':')[1] %>"
protocol="udp"
template="gelf"
)
<% end -%>