For the puppet agent, you can always try tdis rsyslog syntax:
if $programname == 'puppet-agent' then /var/log/puppet.log
if $programname == 'puppet-agent' then ~
Same for the master process.
On Tue, Jul 21, 2015 at 11:29 PM, eric odell wrote:
> How to get all puppet agent/master logs to rsyslog
How to get all puppet agent/master logs to rsyslog? intend to ship all
puppet agent/master messages to central loghost and parse with logstash and
ship to elasticsearch. Currently puppet logs some messages to
/var/log/messages via rsyslog while puppet daemons write directly to
/var/log/puppet/
