From b0eed9c5161014f9330c3700bbaf8b0732b92ffd Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 20 Nov 2025 21:34:45 +1100
Subject: [PATCH] feat: add syslog listener for vlinsert

- enable syslog capture via vlinsert
- add syslog.service.consul service
---
 hieradata/roles/infra/logs/vlinsert.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/hieradata/roles/infra/logs/vlinsert.yaml b/hieradata/roles/infra/logs/vlinsert.yaml
index a268426..38f9a22 100644
--- a/hieradata/roles/infra/logs/vlinsert.yaml
+++ b/hieradata/roles/infra/logs/vlinsert.yaml
@@ -14,6 +14,8 @@ victorialogs::node::options:
   envflag.enable: 'true'
   select.disable: 'undef'
   storageNode.tls: 'undef'
+  syslog.listenAddr.tcp: ':21514'
+  syslog.timezone: 'Australia/Sydney'
   storageNode:
     - ausyd1nxvm2108.main.unkin.net:9428
     - ausyd1nxvm2109.main.unkin.net:9428
@@ -45,7 +47,20 @@ consul::services:
         tls_skip_verify: true
         interval: '10s'
         timeout: '1s'
+  syslog:
+    service_name: 'syslog'
+    address: "%{facts.networking.ip}"
+    port: 21514
+    checks:
+      - id: 'vlinsert_syslog_tcp_check'
+        name: 'VictoriaLogs Syslog TCP Check'
+        tcp: "%{facts.networking.fqdn}:21514"
+        interval: '30s'
+        timeout: '5s'
 profiles::consul::client::node_rules:
   - resource: service
     segment: vlinsert
     disposition: write
+  - resource: service
+    segment: syslog
+    disposition: write
-- 
2.47.3