bundle agent syslog { # Configure rsyslogd and tcp-wrapper for it. vars: "syslog_file" string => "/etc/rsyslog.d/debian-edu-client.conf"; files: debian.!server.!standalone:: "$(syslog_file)" perms => m("644"); debian.(server|ltspserver):: # Enable UDP to make sure that syslog messages are accepted via UDP "/etc/rsyslog.d/debian-edu-collector.conf" link_from => ln_s("/usr/share/debian-edu-config/rsyslog-collector"), move_obstructions => "true"; "/etc/rsyslog.d/debian-edu-filters.conf" link_from => ln_s("/usr/share/debian-edu-config/rsyslog-filters"), move_obstructions => "true"; } bundle agent editline_syslog { vars: "hosts" string => "syslog: 10."; "ltsp" string => "syslog: 192.168.0."; "client" string => "*.* @${edu.syslogserver}"; files: # FIXME tcp-wrapper doesn't seem to be used by rsyslogd. # Allow syslog packages from 10.0.0.0/8 on server. debian.server.installation:: "/etc/hosts.allow" create => "true", edit_line => append_if_no_line("$(hosts)"); # Allow syslog packages from 192.168.0.0/24 on ltsp-server. debian.ltspserver.installation:: "/etc/hosts.allow" create => "true", edit_line => append_if_no_line("$(ltsp)"); # On every host except the server and a standalone machine, send # syslog messages to the central collector. debian.!server.!standalone.installation:: "/etc/rsyslog.d/debian-edu-client.conf" create => "true", edit_line => append_if_no_line("$(client)"); }