New sequence to manage rsyslog config
Only client configuration for now
This commit is contained in:
1
seqs/rsyslog/10-cron.conf
Normal file
1
seqs/rsyslog/10-cron.conf
Normal file
@@ -0,0 +1 @@
|
||||
if $programname == 'CRON' and re_match($msg, "\\(root\\).*CMD.*") then stop
|
6
seqs/rsyslog/10-snmp.conf
Normal file
6
seqs/rsyslog/10-snmp.conf
Normal file
@@ -0,0 +1,6 @@
|
||||
#Blocking snmpd connection information
|
||||
if $programname == 'snmpd' and $msg contains 'Connection from UDP: [192.168.23.21' then stop
|
||||
if $programname == 'snmpd' and $msg contains 'Cannot statfs' then stop
|
||||
# raspberry pi sepcific
|
||||
if $programname == 'snmpd' and $msg contains 'pcilib:' then stop
|
||||
if $programname == 'sudo' and re_match($msg, "Debian-snmp.*USER=root.*COMMAND") then stop
|
4
seqs/rsyslog/90-remote.conf
Normal file
4
seqs/rsyslog/90-remote.conf
Normal file
@@ -0,0 +1,4 @@
|
||||
# for UDP
|
||||
@12.34.56.78:514
|
||||
# for tcp
|
||||
#@@12.34.56.78:514
|
Reference in New Issue
Block a user