Closed spion06 closed 9 years ago
Are there any outstanding issues with this pull that need to be resolved?
Sorry for the late response. Is there a particular reason for moving this code into a library?
I have a use-case where I need to forward auditd events through rsyslog and not have them go to a file since auditd is already sending these logs to a file. currently i'm replicating the search code in my cookbook. Here's what my config looks like in rsyslog.d
$ActionQueueType LinkedList # use asynchronous processing
$ActionQueueFileName srvrfwd # set file name, also enables disk mode
$ActionResumeRetryCount -1 # infinite retries on insert failure
$ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
$SystemLogRateLimitInterval 0
if $programname == 'audispd' then @rsyslog_server
& ~
With the removal of chef-solo support this is all going to get reworked in the near future.
thanks for the update. Should I assume I need to continue to implement my own search function for my use-case or will that be resolved with the rework?
Please let me know if there is anything else you would like to see done with this. There is already a test to verify that the server is added to the config [1] so I did not write another one.
[1] https://github.com/opscode-cookbooks/rsyslog/blob/master/test/integration/client/bats/verify_client.bats