---
- name: Converge
  hosts: all
  roles:
    - ansible-role-logstash
  vars:
    logstash_plugins:
      - name: logstash-output-influxdb
    logstash_patterns:
      postfix: |
        # Syslog stuff
        PROCESS ([\w._\/%-]+)
        COMPID postfix\/%{PROCESS:process}(?:\[%{NUMBER:pid}\])?
        POSTFIX (?:%{SYSLOGTIMESTAMP:timestamp}|%{TIMESTAMP_ISO8601:timestamp8601}) (?:%{SYSLOGFACILITY} )?%{SYSLOGHOST:logsource} %{COMPID}:
    logstash_inputs:
      - >
        file {
          path => "/var/log/syslog"
        }
    logstash_outputs:
      - >
        file {
          path => "/tmp/logstash.log"
          codec => "json"
        }
    logstash_logging_config:
      appender.rolling.strategy.max: 15

  pre_tasks:
    - name: update apt cache
      ansible.builtin.apt:
        update_cache: true