diff --git a/roles/bastionhost/tasks/system_setup/rsyslog_forwarding.yml b/roles/bastionhost/tasks/system_setup/rsyslog_forwarding.yml index 7d2e541..67d9850 100644 --- a/roles/bastionhost/tasks/system_setup/rsyslog_forwarding.yml +++ b/roles/bastionhost/tasks/system_setup/rsyslog_forwarding.yml @@ -4,11 +4,13 @@ name: rsyslog-gnutls # For TLS support state: present -- name: Bastionhost | rsyslog forwarding | Ensure rsyslog GELF module is installed for Graylog +- name: Bastionhost | rsyslog forwarding | Ensure rsyslog GELF module is installed (on RedHat family) ansible.builtin.package: name: rsyslog-gelf # For Graylog Extended Log Format (GELF) state: present - when: log_forwarding_type == 'gelf' + when: + - log_forwarding_type == 'gelf' + - ansible_os_family == "RedHat" - name: Bastionhost | rsyslog forwarding | Configure GELF forwarding for SSH logs (for Graylog) ansible.builtin.copy: