Rotate remote logfiles

rsyslog server: add rule to log each host to it's own logfile
2025-02-21 12:15:35 +01:00 · 2025-02-21 12:13:48 +01:00
2 changed files with 7 additions and 0 deletions
--- a/global/overlay/etc/puppet/modules/soc/templates/rsyslog/rsyslog-local.conf.erb
+++ b/global/overlay/etc/puppet/modules/soc/templates/rsyslog/rsyslog-local.conf.erb
@ -19,3 +19,9 @@ input(
  maxDataSize="10k"
  oversizeMode="truncate")
 <% end -%>
+
+# Split remote hosts to separate logs for easier reading
+# make sure local logs still are sent to default files
+$template RemoteHost,"/var/log/remote/%HOSTNAME%/syslog.log
+if ($fromhost-ip != "127.0.0.1") then ?RemoteHost
+& ~
--- a/global/overlay/etc/puppet/modules/soc/templates/rsyslog/rsyslog.logrotate.erb
+++ b/global/overlay/etc/puppet/modules/soc/templates/rsyslog/rsyslog.logrotate.erb
@ -11,6 +11,7 @@
 /var/log/cron.log
 /var/log/debug
 /var/log/messages
+/var/log/remote/**/*.log
 {
 	rotate 13
 	daily
Author	SHA1	Message	Date
Johan Björklund	82b24ade7c	Rotate remote logfiles	2025-02-21 12:15:35 +01:00
Johan Björklund	43bebb8332	rsyslog server: add rule to log each host to it's own logfile	2025-02-21 12:13:48 +01:00