rsyslog-formula

Configures and starts rsyslog service. Currently the log file schema is based on the debian default. The formula allows control if rsyslog should listen for tcp / udp connections. Further ikml logging (kernel) logging can be disabled, e.g. for lxc containers. It supports both a client only (sending all logs to another machine) and a server side (receiving logs from mulitple other machines).

It works on Redhat, Debian, FreeBSD, Suse and Arch OS families.

In situations where there's already a default logger installed (e.g. a FreeBSD jail), an option exists to declare that rsyslog is the exclusive system logger. This provides a facility to add other loggers to a stoplist which helps, for example, to ensure that port 514 UDP is free for rsylog to use.

Note

Contributions are welcome.

Available states

Install and configure the rsyslog package and enable the service. See the pillar.example file for configuration.

Changelog

April 2015: the default rules were moved from rsyslog.conf to 50-default.conf. This file will be loaded if the rsyslog:custom pillar isnt set. However, if your rsyslog:custom specifies other files to include, you must add the 50-default.conf as well!