Question: Why include rsyslog configuration?

[andrewhowdencom]

Holaa;

Why include rsyslog configuration? It creates an implicit dependency here, and I don't think it's compatible with systemd-journald (for example)

[ssummer3]

That's a good question. I believe the default osquery syslog configuration assumes rsyslog.

If you think this is broken under any of the supported platforms (enumerated in meta/main.yml), or want to add another supported distribution, I'd be happy to give you commit access.

[andrewhowdencom]

Noice. Actually, I was looking for an ansible role to start using experimentally for some stuff here; I'll raise another query with my other request, and if possible, start using this (i'll fix this at the same time if it come sup)