- name: Add forward to syslog
  hosts: all
  tasks:
    - name: Create 99-forward.conf
      shell: echo "*.* action(type=\"omfwd\" target=\"192.168.10.221\" port=\"514\" protocol=\"tcp\" Template=\"RSYSLOG_SyslogProtocol23Format\" TCP_Framing=\"octet-counted\" KeepAlive=\"on\")" > /etc/rsyslog.d/99-forward.conf

    - name: Restart rsyslog.service
      shell: systemctl restart rsyslog.service