This role installs to Sumo Logic collector agent on RHEL-based Linux.
The Sumo Logic-provided RPM includes all software dependencies, however, it would be worth reviewing the current sys reqs.
Required:
- sumologic_rpm_url - For some reason Sumo's RPMs are pod-specific, meaning you have to download a different RPM depending on where your pod is hosted. Check here for the RPM for your pod's region.
- sumologic_access_id - What it says on the tin.
- sumologic_access_key - Same as above.
Optional:
- sumologic_ephemeral_agent - Defaults to true. Otherwise, you'll be manually deleting un-used and non-existent collectors out of the Sumo console. If you'd prefer that, set to false.
- env_timezone - Defaults to UTC. If you'd like something, set using the TZ format.
- sumologic_tracked_logs - The linux secure, messages, and yum logs are tracked by default.
None
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
---
- hosts: servers
become: yes
vars_files:
- group_vars/env.yml
roles:
- { role: chrisdodds.sumologic-agent }
Inside your group_vars env file
---
# env vars
sumologic_rpm_url: 'https://collectors.us2.sumologic.com/rest/download/rpm/64'
sumologic_access_id: 'XXXXXXXX'
sumologic_access_key: 'XXXXXXX'
sumologic_tracked_logs:
- name: "nginx access"
description: "nginx access log"
category: "application/prod/nginx"
path: "/var/log/nginx/access.log
filters: "{ json block per Sumo Logic's documentation }"
MIT
Chris Dodds - @liquid_chickens - chrisdodds.net