Problem using network capability

[Musashisan]

Hi !

Im trying to configure a centralized rsyslog server.
After i enable the 'network' capability, the rsyslog throws an error:
rsyslogd-2209: input module name 'imudp' is unknown [v8.16.0 try http://www.rsyslog.com/e/2209 ]

It seems the role is generating the input file, but the network module file is empty.
After checking the code, some conditions does not match in defaults/main.yml file:
- comment: 'Enable UDP support' options: |- module(load="imudp") state: '{{ "present" if (rsyslog__send_over_tls_only) else "absent" }}'
...
- comment: 'Log messages from remote hosts over UDP' options: |- input( type="imudp" port="{{ rsyslog__udp_port }}" ruleset="remote" ) state: '{{ "present" if (not rsyslog__send_over_tls_only) else "absent" }}'

If rsyslog__send_over_tls_only is not enabled, the input is defined and the module is not loaded. If you use tls_only, the module is loaded but the input is not defined.

¿ is this some kind of restriction to force use of tls ? ¿ is there some configuration option to aviod it ?

[drybjed]

I suspect that rsyslog__send_over_tls_only would need to be casted to |bool to be effective here. You could try changing that in the defaults/main.yml file and checking if that works.

What OS release and Ansible version are you using?

[Musashisan]

$ ansible --version ansible 2.2.2.0 config file = /etc/ansible/ansible.cfg configured module search path = Default w/o overrides
I changed to rsyslog__send_over_tls_only | bool in both cases, but the module is not loaded becose the 10-network-modules.conf is empty.

I changed to - comment: 'Enable UDP support' options: |- module(load="imudp") state: '{{ "present" if (not rsyslog__send_over_tls_only) else "absent" }}'
- comment: 'Enable TCP support' options: |- module(load="imptcp") state: '{{ "present" if (not rsyslog__send_over_tls_only | bool) else "absent" }}' and now works.

[drybjed]

Weird. I'm currently working on something else, I'll check this out at some other time. I presume that you don't use debops.pki for X.509 certificate support?

[Musashisan]

You are right, i am not using debops.pki
I just installed the debops.rsyslog role and my variable definition:
`rsyslog__capabilities:

• network
• remote-files
  `

[Musashisan]

OS version: Ubuntu 16.04.2 LTS

bwt thank for your fast reply !