Revision 8dff660b
Added by Alexis Mousset over 7 years ago
| techniques/system/common/1.0/promises.st | ||
|---|---|---|
|
any::
|
||
|
|
||
|
"syslog_conf_comment" string => "# Autogenerated by rudder, do not edit${const.n}";
|
||
|
"syslog_ng_conf_prefix" string => "filter f_local_rudder{facility(local6) and program(\"rudder.*\");};destination rudder_loghost {";
|
||
|
"syslog_ng_conf_prefix" string => "filter f_local_rudder{facility(local6) and program(\"rudder.*|cf-agent.*\");};destination rudder_loghost {";
|
||
|
"syslog_ng_conf_proto" string => "${syslogng_rule_prefix}";
|
||
|
"syslog_ng_conf_start" string => "(\"";
|
||
|
"syslog_ng_conf_port" string => "\" port (";
|
||
| ... | ... | |
|
"syslog_ng_conf_final" string => "flags(final);};";
|
||
|
|
||
|
"syslog_ng_conf" string => concat("${syslog_conf_comment}", "${syslog_ng_conf_prefix}", "${syslog_ng_conf_proto}", "${syslog_ng_conf_start}", "${server_info.cfserved}", "${syslog_ng_conf_port}", "${syslog_ng_conf_portno}", "${syslog_ng_conf_suffix}", "${syslog_ng_conf_final}");
|
||
|
"syslog_ng_conf_regex" string => concat(escape("${syslog_ng_conf_prefix}"), "(tcp|udp)", escape("${syslog_ng_conf_start}"), "[^\"]+", escape("${syslog_ng_conf_port}"), "[0-9]+", escape("${syslog_ng_conf_suffix}"), ".*");
|
||
|
"syslog_ng_conf_regex" string => concat(escape("filter f_local_rudder{facility(local6) and program("), ".*", escape(");};destination rudder_loghost {"), "(tcp|udp)", escape("${syslog_ng_conf_start}"), "[^\"]+", escape("${syslog_ng_conf_port}"), "[0-9]+", escape("${syslog_ng_conf_suffix}"), ".*");
|
||
|
|
||
|
classes:
|
||
|
|
||
| ... | ... | |
|
|
||
|
(rsyslog_version_5_6_4_ok|rsyslog_version_5_6_4_not_ok).!windows.rsyslogd.!policy_server::
|
||
|
"/etc/rsyslog.d/rudder-agent.conf"
|
||
|
edit_line => append_if_no_lines("#Rudder log system${const.n}${rsyslogd_message_reduction}${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'rudder' then ${rsyslog_rule_prefix}${server_info.cfserved}:&SYSLOGPORT&${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'rudder' then ~"),
|
||
|
edit_line => append_if_no_lines("#Rudder log system${const.n}${rsyslogd_message_reduction}${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'rudder' then ${rsyslog_rule_prefix}${server_info.cfserved}:&SYSLOGPORT&${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'rudder' then ~${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'cf-agent' then ${rsyslog_rule_prefix}${server_info.cfserved}:&SYSLOGPORT&${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'cf-agent' then ~"),
|
||
|
create => "true",
|
||
|
edit_defaults => empty_backup,
|
||
|
classes => rudder_common_classes("rsyslog");
|
||
| techniques/system/distributePolicy/1.0/rudder-rsyslog-relay.st | ||
|---|---|---|
|
|
||
|
## Syslog messages from "rudder"
|
||
|
:programname, contains, "rudder" ~
|
||
|
:programname, contains, "cf-agent" ~
|
||
|
|
||
|
## Syslog messages from "rudder" forwarded from AIX
|
||
|
:msg, ereregex, "from .*: rudder" ~
|
||
|
:msg, ereregex, "from .*: cf-agent" ~
|
||
|
|
||
| techniques/system/distributePolicy/1.0/rudder-rsyslog-root.st | ||
|---|---|---|
|
|
||
|
## Syslog messages from "rudder"
|
||
|
:programname, contains, "rudder" ~
|
||
|
:programname, contains, "cf-agent" ~
|
||
|
|
||
|
## Syslog messages from "rudder" forwarded from AIX
|
||
|
:msg, ereregex, "from .*: rudder" ~
|
||
|
:msg, ereregex, "from .*: cf-agent" ~
|
||
|
|
||
Also available in: Unified diff
Fixes #9776: Logs from 4.1 agent are not sent to the server