From 0ec0cec7a4a7af9fd2c2e9db4bb90007b10f99ec Mon Sep 17 00:00:00 2001
From: "stephane.david" <thedarty@gmail.com>
Date: Fri, 8 May 2026 15:34:44 +0200
Subject: [PATCH] add playbook: add forward syslog

---
 rsyslog_forward.yml | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 rsyslog_forward.yml

diff --git a/rsyslog_forward.yml b/rsyslog_forward.yml
new file mode 100644
index 0000000..bf4407c
--- /dev/null
+++ b/rsyslog_forward.yml
@@ -0,0 +1,8 @@
+name: Add forward to syslog
+hosts: all
+tasks:
+  - name: Create 99-forward.conf
+    shell: echo "*.* action(type="omfwd" target="192.168.10.221" port="514" protocol="tcp" Template="RSYSLOG_SyslogProtocol23Format" TCP_Framing="octet-counted" KeepAlive="on")" > /etc/rsyslog.d/99-forward.conf
+
+  - name: Restart rsyslog.service
+    shell: systemctl restart rsyslog.service
\ No newline at end of file