@@ -64,42 +64,9 @@ template(name="WelfRemoteFormat" type="string" string="%TIMESTAMP% id=firewall t
64
64
:::date-year%-%timereported:::date-month%-%timereported:::date-day% %timereported:::date-hour%:%timereported:::date-minute%:%timereported\
65
65
:::date-second%\" fw=\"{{ fw_name }}\" pri=%syslogpriority% msg=\"%syslogtag%%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\"\n")
66
66
67
- #
68
- # Set the default permissions for all log files.
69
- #
70
- $FileOwner root
71
- $FileGroup adm
72
- $FileCreateMode 0640
73
- $DirCreateMode 0755
74
- $Umask 0022
75
-
76
- #
77
- # Where to place spool and state files
78
- #
79
- $WorkDirectory /var/spool/rsyslog
80
-
81
- #
82
- # Include all config files in /etc/rsyslog.d/
83
- #
84
- $IncludeConfig /etc/rsyslog.d/*.conf
85
-
86
- #
87
- # Suppress duplicate messages and report "message repeated n times"
88
- #
89
- $RepeatedMsgReduction on
90
-
91
- ###############
92
- #### RULES ####
93
- ###############
94
-
95
67
#
96
68
# Remote syslog logging
97
69
#
98
-
99
- # The omfwd plug-in provides the core functionality of traditional message
100
- # forwarding via UDP and plain TCP. It is a built-in module that does not need
101
- # to be loaded.
102
-
103
70
{% set servers = SYSLOG_SERVER | d ({}) -%}
104
71
{% for server in servers %}
105
72
{% set conf = servers [server ] | d ({}) -%}
@@ -134,3 +101,31 @@ $RepeatedMsgReduction on
134
101
*.{{ severity }}
135
102
action(type="omfwd" Target="{{ server }}" Port="{{ port }}" Protocol="{{ proto }}" Template="{{ template }}"{{ options }})
136
103
{% endfor %}
104
+
105
+ #
106
+ # Set the default permissions for all log files.
107
+ #
108
+ $FileOwner root
109
+ $FileGroup adm
110
+ $FileCreateMode 0640
111
+ $DirCreateMode 0755
112
+ $Umask 0022
113
+
114
+ #
115
+ # Where to place spool and state files
116
+ #
117
+ $WorkDirectory /var/spool/rsyslog
118
+
119
+ #
120
+ # Include all config files in /etc/rsyslog.d/
121
+ #
122
+ $IncludeConfig /etc/rsyslog.d/*.conf
123
+
124
+ #
125
+ # Suppress duplicate messages and report "message repeated n times"
126
+ #
127
+ $RepeatedMsgReduction on
128
+
129
+ ###############
130
+ #### RULES ####
131
+ ###############
0 commit comments