Add support for syslog for external logging

[ryanpetrello]

ISSUE TYPE

• Feature Idea

COMPONENT NAME

• API
• UI

SUMMARY

awx allows you to ship logs to external systems via UDP - this feature primarily exists to support logstash via UDP. As such, UDP messages shipped from awx are in the JSON format that logstash expects. It would be nice if you could ship syslog-formatted messages over UDP or TCP.

related: https://github.com/ansible/awx/issues/1062

[ragingpastry]

It would be nice to do UDP and TCP

[TwoTwenty]

syslog +1

[harrytruman]

+1

[SLusenti]

+1

[sandrich]

+1

[lamehost]

+1

[MTWiley]

+1

[scatenag]

+1

[DE110283]

+1

[jakejennings]

+1

[baseely]

@ryanpetrello Do we still need this feature? if yes, could you please explain any approach you might have in mind to start? :blush:

[ryanpetrello]

@baseely I’m no longer an active contributor to AWX.

@shanemcd or @AlanCoding may care to weigh in.

[baseely]

Hey @AlanCoding and @shanemcd Do we still in need for this feature?

[ericzolf]

It seems that this feature is required to directly aggregate logs of AWX/controller into Qradar from IBM.

[cigamit]

It seems that this feature is required to directly aggregate logs of AWX/controller into Qradar from IBM.

Syslog max message sizes might come into play, especially with Qradar. Logging data from AWX is quite verbose, especially if running with Diff Mode enabled.

https://www.ibm.com/support/pages/qradar-tcp-and-udp-syslog-maximum-payload-message-length-qradar-appliances

[rurod]

Hi, it would be even nicer if AWX could support a TLS enabled TCP endpoint as a destination for syslog.