Centralized logging configuration

[flhorizon]

srv9 rsyslogd: centralize syslogging from every node including itself

• some facilities (kern, user...) and levels (debug, info...) messages are never logged.
• local failover: messages sent while the logserver was offline are never logged.

  Core functionnality

• [X] add into the ansible playbook
• [X] adequate log rotation on log server
• [ ] iptables rules on log server (filter :514 inet origin)

  Required features

• [ ] Enable logging for non-logging services (please expand !)
  • [ ] LDAP ?
  • [ ] Bind9 ?
• [ ] Mail errors and critical conditions

[flhorizon]

local logging: /etc/rsyslog.d/local-logging.conf remote logging: refactored into RainerScript, compressed logs: /etc/rsyslog.d/remote-logging.conf

• syslog -> /var/log/HOSTNAME/syslogz
• others -> /var/log/HOSTNAME/FACILITY.zlog

Extended the logrotate config to rotate remote/compressed logs; disabled compression for now.

Updated.

[flhorizon]

• Each node - srv9: regular logging + forwarding to srv9
• srv9: aggregating each node (including itself) worth of logging into the regular file names.
  • tweaked log rotation (retain x10) on srv9

Emergency mailing: requires the mail server.