puppet-ulogd

ulogd is a userspace logging daemon into which you can feed netfilter data and have it log it in a flexible way, to multiple different formats and destinations.

Usage

include ulogd

Following config:

ulogd::config:
  global:
    stack: log2:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU
  log2:
    group: 2
  emu1:
    file: /var/log/firewall.log
    sync: 1

can be used to log iptables rules with -j NFLOG --nflog-group 2

-A INPUT -m limit --limit 1/s -p icmp -j NFLOG --nflog-group 2 --nflog-prefix "ICMP:"

nflog-group number needs to match log group in ulogd config.

Load only selected plugins:

ulogd::plugins:
  - ulogd_inppkt_NFLOG.so
  - ulogd_output_LOGEMU.so

Reference

Table of Contents

Classes

Public Classes

• ulogd: Manage user space logging daemon

Private Classes

• ulogd::install: Manage packages

Data types

• Ulogd::Config: ulogd configuration with sections

Classes

ulogd

Manage user space logging daemon

Examples

include ulogd

Parameters

The following parameters are available in the ulogd class:

• manage_package
• package_ensure
• packages
• manage_service
• service_name
• service_ensure
• plugin_path
• plugins
• config_path
• config

manage_package

Data type: Boolean

Whether package should be managed

package_ensure

Data type: String

packages

Data type: Array[String,1]

manage_service

Data type: Boolean

service_name

Data type: String

service_ensure

Data type: String

plugin_path

Data type: Stdlib::Absolutepath

plugins

Data type: Array[String]

If empty, all plugins will be loaded

Default value: []

config_path

Data type: Stdlib::Absolutepath

config

Data type: Ulogd::Config

Configuration as a Hash

Default value: {}

Data types

Ulogd::Config

ulogd configuration with sections

Alias of

Hash[String[1], Hash[
                        String[1], Variant[String, Numeric, Boolean]
                       ]]

Changelog

All notable changes to this project will be documented in this file.

Release 0.1.0 [2024-09-14]

• Initial release supporting basic config and plugins.