Configuring hosts to report log data

Now that we've been through the work of Puppetizing the host infrastructure for Logstash, let's take a look at how to Puppetize the collection on our hosts. There are a large number of ways to do this that contain various tradeoffs on things such as local parsing and the size of the shipping solution.

For this exercise, we'll use Redis as a message queue. This is the recommended configuration if you wish to use a message queue based system, if you wish to use a message queue and do not have one installed. It has the downside of having added complexity due to needing Redis installed. However, our Redis installation in this example is quite simple using a community module.

This is a well-supported and tested configuration. ...

Get Learning Puppet Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.