ensure that Jenkins does proper logging required by GSA

[JJediny]

Happy to parse out our fluentd agent install into its own repo w/ secops target?

<source>
  type tail
  format multiline
  format_firstline /^\w+\s\d+,\s\d+/
  format1 /(?<message>.*)/
  path /var/log/jenkins/jenkins.log
  read_from_head true
  tag jenkins
</source>

[afeld]

D2D has been using RSYSLOG as part of our base image...not sure if there's major benefit for one vs. the other, or if it's a bad idea to mix them?

/cc @dvvolodin

[afeld]

Also presumably need to send logs for the jobs...

https://wiki.jenkins.io/display/JENKINS/Logging#Logging-MakinglogsavailableoutsideofthewebUI

[afeld]

• Access logging
• https://www.cloudbees.com/blog/best-practices-setting-jenkins-auditing-and-compliance
• rsyslog config example
• Syslog logger plugin

[afeld]

• [x] Ensure that Jenkins system logs are making it to syslog
• [x] Ensure access logging is enabled/present
• [ ] Ensure that job logs are making it to syslog

[JJediny]

https://wiki.jenkins.io/display/JENKINS/FluentD+Plugin...

For testing/consideration: rsyslog may alter/manipulate the synthax of the java output