Files
ansible-linux-infra/roles/logging_rsyslog/templates/60-forward-siem.conf.j2
2026-08-19 09:51:43 +02:00

25 lines
781 B
Django/Jinja

# {{ ansible_managed }}
{% if syslog_use_tls %}
$DefaultNetstreamDriver gtls
$DefaultNetstreamDriverCAFile /etc/pki/tls/certs/ca-bundle.crt
$ActionSendStreamDriverMode 1
$ActionSendStreamDriverAuthMode x509/name
$ActionSendStreamDriverPermittedPeer {{ syslog_collector_host }}
$ActionQueueType LinkedList
$ActionQueueFileName siem_fwd_queue
$ActionQueueMaxDiskSpace 1g
$ActionQueueSaveOnShutdown on
$ActionResumeRetryCount -1
auth,authpriv.*;kern.*;cron.* @@(o){{ syslog_collector_host }}:{{ syslog_collector_port }}
{% else %}
$ActionQueueType LinkedList
$ActionQueueFileName siem_fwd_queue
$ActionQueueMaxDiskSpace 1g
$ActionQueueSaveOnShutdown on
$ActionResumeRetryCount -1
auth,authpriv.*;kern.*;cron.* @{{ syslog_collector_host }}:{{ syslog_collector_port }}
{% endif %}