name: Add forward to syslog hosts: all tasks: - name: Create 99-forward.conf shell: echo "*.* action(type="omfwd" target="192.168.10.221" port="514" protocol="tcp" Template="RSYSLOG_SyslogProtocol23Format" TCP_Framing="octet-counted" KeepAlive="on")" > /etc/rsyslog.d/99-forward.conf - name: Restart rsyslog.service shell: systemctl restart rsyslog.service